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Abstract 


The subject of this thesis is to formalize the arithmetical hierarchy in constructive 
type theory, set up synthetic oracle computability including a synthetic definition 
of the Turing jump, and connect both by proving Post’s theorem in synthetic com- 
putability. We aim at establishing most proofs constructively and mechanize all 
results in the proof assistant Coq. 


Synthetic computability abstracts from concrete models of computation by axio- 
matically considering all (partial) functions N —> N as computable which allows to 
elegantly establish computability theory. The subject of this thesis is to prove Post’s 
theorem in such a setting. 


For that purpose, we formalize two definitions of the arithmetical hierarchy. The 
first definition is due to Odifreddi and is explicit in first-order arithmetic without 
relying on a concrete model of computation. It classifies formulas in prenex normal 
form, for which we mechanize a structurally recursive conversion algorithm, via 
counting the number of quantifier alternations. The second definition is a synthetic 
version of the Kleene-Mostowski definition and classifies type-theoretic predicates 
directly. After studying the equivalence of the synthetic to the better known first- 
order definition, based on axioms from synthetic computability, we continue work- 
ing with the second definition which is more convenient to establish synthetic re- 
sults with. 


As the second main ingredient, we advance a synthetic definition of Turing reduc- 
tions by Forster and Kirst who follow an idea by Bauer to synthetic oracle machines 
by adjusting one of its main components, the continuity requirement. This enables 
constructive results like the determination of oracle machines solely by a continu- 
ous higher-order partial function. Then, we define a synthetic version of the Turing 
jump as the halting problem of synthetic oracle machines by assuming an enumer- 
ator of continuous higher-order partial functions. 


Most of our key results are constructive. Only the final proof of Post’s theorem relies 
on the law of excluded middle whose usage we trace back to exactly two places. 
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Chapter 1 


Introduction 


The subject of this thesis is to formalize the arithmetical hierarchy in constructive 
type theory, set up synthetic oracle computability including a synthetic definition 
of the Turing jump, and prove Post’s theorem in synthetic computability, all mecha- 
nized in the proof assistant Coq. In the following, we briefly introduce the historical 
results and give a context of the synthetic setting in which we formalize them. 


In computability theory, the halting problem of whether a Turing machine [56] 
halts on a given input is the standard example of a problem that is undecidable. 
But it is also known that there are problems that are relatively harder to decide. 
In his PhD thesis, Turing came up with the idea of oracle machines [58] extending 
the model of computation with a hypothetical solver for a potentially undecidable 
problem. Oracle machines can be used to study the relative decidability of unde- 
cidable problems. 


An example of a problem that is undecidable relative to the halting problem is 
totality, the question of whether a Turing machine halts on all inputs. The best one 
can do is to construct a semi-decider for the complement of totality that queries a 
hypothetical solver for the halting problem for all inputs. 


The game continues, as cofiniteness — whether a Turing machine halts on all but 
finitely many inputs - is still undecidable relative to totality. Cofiniteness is only 
semi-decidable relative to totality by querying a hypothetical solver for totality on 
all input ranges that exclude a finite prefix. 


In fact, for every problem, a problem that is harder to decide can be constructed 
following Kleene and Post [47, 33, 34]: The Turing jump of a problem Q is the 
halting problem of oracle machines with an oracle for Q. It is semi-decidable but 
not decidable relative to Q. 


2 Introduction 


Starting with a decidable problem, e.g. whether a number is in the empty set Ø, 
repeated jumping gives rise to a hierarchy of undecidable problems. We write @ im) 
for the n-th Turing jump starting with al := Ø. Oracle machines with an oracle 
for Y can compute the same functions as normal Turing machines, as querying the 
oracle does not give any information. Therefore, the Turing jump of Ø is Turing 


equivalent to the halting problem in the sense that the halting problem can be de- 


(1) (2) 


cided by an oracle machine with an oracle for & ` and vice versa. Similarly, y'””, 


(1) 


i.e. the Turing jump of Ø` ` is Turing equivalent to totality in the sense that totality 


can be decided relative to gl? (3) 


(2) 


and vice versa. And ultimately, 8", i.e. the Turing 


jump of Ø`“ is Turing equivalent to cofiniteness in the sense that cofiniteness can 


be decided relative to ga) and vice versa. 


Another related hierarchy is the arithmetical hierarchy developed independently 
by Kleene in 1943 [31] and by Mostowski in 1947 [38]. It classifies problems based 
on the quantifiers that are needed to formulate the problem. 


For that, consider the following example. Let h(M, i, s) be the decidable predicate 
whether a Turing machine M halts on an input i after at most s steps. Given that, 
the halting problem, totality, and cofiniteness can be formulated as follows. 


Halting Problem H(M,i) := ds. h(M,i, s) 
Totality Tot(M) := Vi. ds. h(M,i, s) 
Cofiniteness Cof(M) := dn. Vi > n. ds. h(M,i, s) 


One can observe that with increasing undecidability, problems need more alternat- 
ing quantifiers to be formulated. That is not a coincidence, but the result of Post's 
Theorem [47] which connects the hierarchy of undecidability gained by iterative 
jumping to the arithmetical hierarchy. 


The levels of the arithmetical hierarchy are denoted with ), and [],,. Predicates 
that are decidable form the base and are classified both as )_, and [ [,. Then, the 
hierarchy is defined inductively as follows. If an existential quantifier is added in 
front of a | |, predicate it is classified as Y, ,,. If a universal quantifier is added 
in front of a ), predicate it is classified as | [, ,,. Given that, a predicate that can 
be written with n alternating quantifier blocks including a leading existential is 
classified as ),, and if the leading quantifier is universal, it is classified as | ],,. 


For example, the halting predicate h from above is both in >, and [ |, because it 
is decidable and can be written without quantifiers. The halting problem is in >", 
because it can be formulated with a single existential quantifier. Totality is in [ |, 
because it can be formulated with two quantifiers and a leading universal. Cofinite- 
ness is in ) ¿ because it can be formulated with three quantifiers and a leading 
existential. 


Precisely, Post’s Theorem [47] states that ga is > „ -complete in the sense that all 
other problems in )_„ are decidable relative to o and that any ),,;-problem is 


semi-decidable relative to a | [, -problem. 


In the original work, Turing, Kleene, Mostowski, and Post all work in a concrete 
model of computation like Turing machines or u-recursive functions. But construc- 
tions in such a model of computation quickly become too complex to do explicitly. 
Therefore, they heavily rely on the so-called Church-Turing thesis [7, 56] saying 
that all algorithms that can be intuitively described are indeed computable in the 
respective model of computation. This makes their arguments hard to mechanize. 


A complementary approach is synthetic computability which was pioneered by 
Richman, Bridges, and Bauer [48, 6, 3]. It abstracts away the concrete model of 
computation by axiomatically considering all functions N > N as computable. This 
is consistent in constructive logic because functions of type N > N defined in con- 
structive logic correspond to programs in some model of computation which re- 
sults from Kleene’s work on realizability [32]. 


We are working in the Calculus of Inductive Constructions (CIC) [10, 43, 44] im- 
plemented in the proof assistant Coq [54]. In Coq, the correspondence between 
functions and programs is made transparent because — from a user-end of view — 
functions need to be defined in a functional programming language. To internal- 
ize this correspondence and derive common results of computability theory within 
CIC, an axiom called CT [35] can be assumed that states that all functions are com- 
putable in a concrete model of computation. 


Most textbooks on computability theory work classically and establish their results 
upon the law of excluded middle. Richman, Bridges, and Bauer [48, 6, 3] work in 
settings where they assume the axiom of countable choice which together with LEM 
allows the construction of non-computable functions [55]. Consequently, assum- 
ing LEM in their synthetic settings is contradictory. Assuming the law of excluded 
middle (LEM) in CIC, however, is consistent [60] even when assuming synthetic 
axioms like CT [15, 17] and enables classical reasoning. Most of our results are 
constructive but some of them, like our synthetic proof of Post’s Theorem, rely on 
LEM which we always carefully label. 


Many areas of computability theory are synthetically well explored. Since all func- 
tions are considered computable, notions like decidability and many-one reduc- 
tions can be natively expressed in synthetic computability without the need to es- 
tablish a whole theory on models of computation first. Also, it is known what 
axioms are needed to show results like the undecidability of the halting problem 
which synthetically corresponds to the question of whether a partial function is de- 
fined at a given value. For that purpose, assuming the enumerability of all partial 


4 Introduction 


functions (EPF) [48, 15] suffices which is a weaker axiom than CT. 


In contrast, there is no obvious way to express oracle machines synthetically since 
assuming an oracle-decider of an undecidable problem in synthetic computability 
is equivalent to assuming falsity and compared to textbooks, there is no model of 
computation to extend by an additional operation for oracles. Before this thesis, 
there was only a little work on synthetic oracle computability. In a seminar talk, 
Bauer [4] proposed a definition of synthetic Turing reductions based on two layers: 
Intuitively, one layer describes the reduction detached from any computability re- 
strictions. Given any mapping (no computability restrictions) of problem instances 
to solutions, the Turing reduction transforms it into another mapping of problem 
instances to solutions (also with no computability restrictions), similarly as an or- 
acle machine can be seen as a transformer of an oracle-solver for one problem to a 
solver of another problem. The second layer is a higher-order function that takes 
an oracle as a function (considered computable in synthetic computability) and 
returns another function (also considered computable). Now, both layers are re- 
quired to agree on all computable oracles to ensure that the only non-computable 
operation possible in the first layer is inspecting the oracle. There is however one 
additional requirement needed. By now, the first layer of the Turing reduction can 
inspect whether the oracle is computable and then behave differently. To prevent it 
from doing so, it is crucial to require it to only inspect the oracle locally by allowing 
only finitely many oracle queries. This is called continuity and discussed later in 
detail. The idea by Bauer of expressing Turing reductions in two layers was picked 
up by Forster and Kirst [16]. In addition, Forster has studied synthetic Turing re- 
ductions with respect to different refinements like bounded Turing reductions and 
total bounded Turing reductions and their relationship to truth-table reducibility. 
To conclude, before this thesis there was a synthetic definition of Turing reductions 
around but it was only known that it is weaker than truth-table reducibility. 


In this thesis, we advance the synthetic definition of Turing reductions by Forster 
and Kirst to synthetic oracle machines. By adjusting the continuity requirement to a 
classically equivalent one, we gain constructive results like that there is a construc- 
tive one-to-one correspondence between continuous higher-order functions and or- 
acle machines. We study what axioms are needed to express the synthetic halting 
problem of oracle machines, which is the Turing jump. We validate our synthetic 
definition of oracle machines by proving Post’s Theorem synthetically which con- 
nects our notions of synthetic oracle computability to a synthetic definition of the 
arithmetical hierarchy. Furthermore, we show the synthetic definition of the arith- 
metical hierarchy equivalent to a textbook presentation by Odifreddi [42] in first- 
order arithmetic by assuming a CT-like axiom. Altogether, we ratify the existing 
notion of synthetic Turing reductions but contribute a constructive advancement 
of the continuity requirement towards a synthetic theory of oracle computability. 


1.1. Outline 5 


We show the eligibility by proving a deep connection of the synthetic notions of 
oracle computability to a textbook representation of the arithmetical hierarchy by 
assuming reasonable axioms. 


1.1 Outline 


In Chapter 2 of this thesis, we introduce the synthetic setting in which we are work- 
ing and establish some other preliminaries. 


In Chapter 3, we present the two definitions of the arithmetical hierarchy that we 
have mechanized, prove results about them and study their equivalence by assum- 
ing a CT-like axiom from synthetic computability. 


The first definition is in the language of first-order arithmetic and is better known 
in the literature. It classifies problems by analyzing the syntax of their defining 
first-order formula. If the formula is in prenex normal form, i.e. has all quantifiers 
in the front, the problem is classified by counting the quantifier alternations of its 
quantifier prefix. 


Formalizing the arithmetical hierarchy explicitly in first-order arithmetic is quite 
heavyweight because it requires mechanizing the syntax and semantics of first- 
order arithmetic first. For that, we use the framework provided by the Cog Library 
for Mechanised First-Order Logic [30] and will contribute some of our results back. 


Every first-order formula can be converted into its prenex normal form, as proved 
by Skolem [50]. We present a fully mechanized and verified structurally recursive 
algorithm for prenex normal form conversion. 


The second definition of the arithmetical hierarchy is purely formalized in type- 
theory without any additional dependencies. It can be seen as the synthetic way 
of defining the arithmetical hierarchy as predicates decidable by a function of type 
N > B form its base. The hierarchy is abstracted away from a concrete model of 
computation or concrete first-order formulas and classifies type-theoretic predi- 
cates directly. This makes it more convenient to work with and establish results 
like a synthetic proof of Post’s Theorem later on. 


In Chapter 4, we study relative decidability in synthetic computability. For that 
purpose, we advance the synthetic definition of Turing reductions by Forster [16] 
that was developed in joint work with Kirst and following an idea by Bauer [4] 
and derive a synthetic notion of oracle machines. Compared to the previous def- 
inition by Forster and Kirst, our synthetic oracle machines are solely determined 
by a higher-order partial function which enables establishing some crucial results 
constructively without relying on the law of excluded middle. 


Introduction 


Then, we present a synthetic definition of the Turing jump as the halting problem 
of oracle machines by assuming an enumeration of higher-order partial functions 
and study its properties. 


Chapter 3 and 4 are orthogonal and can be read independently. Chapter 5 connects 
the arithmetical hierarchy to the hierarchy gained by repeated jumping and with 
that also the previous chapters and presents a synthetic proof of Post’s Theorem. 


1.2 


Contributions 


This thesis includes the following main contributions: 


Two mechanized definitions of the arithmetical hierarchy proven equivalent 
in Section 3.3 by assuming a CT-like axiom (Axiom 3.34). 


— The first definition (Definition 3.14) is directly in first-order arithmetic. 
It classifies problems by analyzing the syntax of their defining first-order 
formula by counting the number of quantifier alternations. This defini- 
tion is better known in the literature and serves as a sanity check for the 
second synthetic definition. 


— The second definition (Definition 3.21) is purely synthetic and without 
additional dependencies. It is more convenient to work with to estab- 
lish results like Post’s theorem synthetically as it classifies type-theoretic 
predicates directly. 


A mechanized and structurally recursive algorithm for prenex normal form 
conversion (Definition 3.7) that enables a rough upper-bound classification 
of first-order formulas in the arithmetical hierarchy. 


A definition of synthetic oracle machines (Definition 4.1) that builds on pre- 
vious work by Forster and Kirst [16] based on an idea by Bauer [4]. We ad- 
vance the previous definition by adjusting the continuity requirement which 
enables constructive results like that synthetic oracle machines are solely de- 
terminable by a higher-order partial function (Theorem 4.17). 


The identification of a suitable axiom, namely the enumerability of higher- 
order partial functions (Axiom 4.25) in order to define the, to the best of our 
knowledge, first synthetic definition of the Turing jump (Definition 4.33). 


A synthetic proof of Post’s Theorem (Section 5.2) connecting the synthetic 
definition of the arithmetic hierarchy to the synthetic definition of the Turing 
jump. Although the proof relies on classical axioms, we were able to trace 
their usage such that the heart of the proof remains essentially constructive. 


1.2. Contributions 7 


All results of this thesis are mechanized in the accompanying Coq development. 
In the digital version of this thesis, all definitions, lemmas and theorems are hyper- 
linked to the respective version in the generated Coq documentation at: 


https://ps.uni-saarland.de/~mueck/bachelor/coqdoc/ 


Furthermore, in the digital version of this thesis, the reader can click on all notations 
to get to the corresponding definitions within the pdf. 


Chapter 2 


Preliminaries 


We are working in the Calculus of Inductive Constructions (CIC) [44] implemented 
in the proof assistant Coq [54]. In this chapter, we introduce constructive type 
theory and define some well-known notions and constructions. Then, we present 
synthetic computability and its basic concept and show how the halting problem is 
formulated and disproven decidable in synthetic computability. Finally, we extend 
our setting by classical axioms that we always carefully highlight when used to 
establish results in this thesis. 


2.1 Constructive Type Theory 


The Calculus of Inductive Constructions (CIC) [44] features a hierarchy of type 
universes T; : T2 : T3... with Tı C T2 C T3... (for our porpuse, we can ignore 
the index and only write T) and an impredicative universe of propositions P c T4. 


CIC has dependent types Vx : s. t that quantify over values x of type s that may 
occur in t. When the return type t does not depend on the value x of the argument 
type s, simple function types s — t are derived. 


Propositions are also types and values of the type are proofs of the proposition. 
This works out because of the Curry-Howard correspondence [11, 26]. So proofs 
of implications are values of the corresponding function type and universally quan- 
tified propositions are gained from the dependent types where V can be interpreted 
as a quantifier in the usual logical sense. 


More types can be defined inductively either in P or T. While types in T may contain 
computational information, types in P do not. The elimination restriction only al- 
lows doing a case analysis on values of noncomputational types in P when proving 
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propositions. This enables us to assume classical axioms for proving propositions 
while computational functions stay constructive. 


Recursive functions need to be structurally recursive on the structure of an induc- 
tive type. This guarantees termination, so all functions of type X — Y are total. 


Logical negation can be defined as =p : P := P = L. We call propositions of 
type X > P predicates and write p := Ax. ap x for the complement of the predicate 
p. When appropriate we use set notation for predicates. For example, we write 
x E p := pxand p E£ q := Vx.px— qx. The subset notation can be extended to 
functional relations and partial functions introduced in Section 2.2. 


Also, a lot of the computational types we are using can be defined inductively: 


e Unit: 1: 7 ::=*:1 


Ud 


e Booleans: B : T ::= true: B | false : 


A function ! : B => B for boolean negation can be defined by case distinction. 


e Natural numbers: N:T:=0:N|S:N=N 


We use the usual notation 0 := O, 1 := S 0,2 := S(S O), and so on. Operations 
like + : N > N > Nand comparison predicates like < : N > N > P can be 
defined recursively. 


Option types: O(X : T) : T ::= None | Some(x : X) 


Products: x (X: T, Y: T) : T ::= pair: X> Y =>XxY 


e Sum types: + (X: T,Y : T): T ::= left: X= X+Y | right : Y => X+ Y 


We call a function of type Vxy : X. (x = y) + (x + y) an equality decider of 
X and call the type X : T discrete if such an equality decider can be defined. 
We write ‘x = y” for the function that is true if x = y and false else. 


e Dependent pairs: E (X: T,p : X > T) : T ::= sig : Vx: X.px > Lx. px 
We write {x : X | px} as notation for the dependent pair Ex. px. 


Lists: L(X:D):Tu= 0: Y(X) | ::X > Y(X) > £(X) 


We write [x, y, z] as notation for the list x::y::z::[]. A function |-| : 2(X) > N 
determining the length of a list, a function + : Y(X) > Z(X) > Z(X) 
concatenating two lists, and on discrete types X also a membership predicate 
E€ : X= Z(X) > P can be defined recursively. 


Vectors: V(X: T)(k:N).X* = O : X? |: ox > X” > x 


2.2. Partial Functions and Functional Relations 11 


Vectors are lists with a fixed length. A function extracting the n-th element 
of a vector can be defined recursively. We write x[n] for the n-th element of 
the vector X: N“ ifn < k. 


A pairing function (+, +) : N x N = N can be easily constructed that acts as a bijection 
between N x N and N. We write A(n, m). fn mas notation for a function that unem- 
beds its singe argument to two numbers such that (An, m). fn m)(n, m) = fnm. 


2.2 Partial Functions and Functional Relations 
We reuse the definition of partial functions by Forster [16]. 


Definition 2.1 Partial functions f : X — Y are functions X — part Y, where part Y is the 
following monadic structure and f x > y means that f is defined at x to be y. 


partA : T 
P:prtA>A-P xP a > x> a > dı=& 
ret : A > part A retaba 
> : part A > (A > part B) > part B | x >= f> b e (Ja.xpaxfapb) 
undef : part A A a. undef > a 
u: (IN > B) > part N uf > n e fn = true A Vm<n. fm = false 
seval : part A > N > OA x> a + Jn. sevalxn = Some a 
sevalxn = Some a > 
m > n > sevalxm = Some a 


While partial functions can be considered computable in synthetic computability, 
functional relations form the uncomputable counterpart and can be used to express 
uncomputable mappings. 


A function relation R : X ~ Y := X => Y > P is a binary predicate that is functional 
such that Rxyı > Rxy2 > yı = y2. We say that a partial function f computes a 
functional relation Rand write f> Rif WVxy.fxby + Rxy. We again use set notation 
when appropriate and write Dom(R) x := dy. Rxy, Rı SR2:=R¡xy > Roxy and 
Ry SL R2:=xE€EL> R¡xy => Roxy. 


We write fı = f2 := Vxy. fı x> y e foxb yand R; =R>:= Vxy. Ry xy e Roxy for 
the extensional equality of partial functions and functional relations. 
2.3 Synthetic Computability 


In synthetic computability [48, 6, 3, 16], all functions are considered computable. 
This allows to natively express notions such as (semi-)decidability and many-one 
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reductions without talking about a model of computation. We show these defi- 
nitions in Subsection 2.3.1. In Subsection 2.3.2, we introduce axioms that can be 
assumed to among others establish negative results like the undecidability of the 
halting problem in Subsection 2.3.3. 


2.3.1 Basic Notions 


The following definitions in constructive type theory are by Forster et al. [18, 16]. 


Definition 2.2 A predicate p : X = P is decidable if there is exists a decider f : X — B: 
D(p) := af. Vx. px e fx = true 


Definition 2.3 A predicate p : X > P is semi-decidable if there exists is a semi-decider 
f!X>N-+B: S(p):= 4f. Vx. px e Jn. fxn = true 


Alternatively, semi-decidability can be defined using partial functions. We use Def- 
inition 2.3 in Chapter 3 and the alternative characterization given by Lemma 2.4 in 
Chapter 4. 


Lemma 24 S(p) > 4g: X-1.pxegxpP 


Proof As O 1 is isomorphic to B, the construction using seval is straightforward. O 


Definition 2.5 A predicate p : X > P is many-one reducible to a predicate q : A = P 
if there is a many-one reduction f : X — A that translates instances of p to instances of q: 
P<mq:= Jf. Yx. px e q(fx) 


Lemma 2.6 Many-one reductions are transitive: p<mg— qŚmT™ p<mr 


Proof Composing the two reductions leads to the claimed many-one reduction. O 


2.3.2 Axioms of Synthetic Computability 


The axiom CT [35, 15] makes explicit that all functions N — N are considered com- 
putable in synthetic computability by assuming that there exists a universal func- 
tion q in a concrete model of computation like u-recursive functions. 


Definition 2.7 There exists a step-wise interpreter of u-recursive functions ,, where 
$, ¡xn is the output of the i-th u-recursive function on input x after n steps, or None if 
the i-th u-function does not terminate after n steps: 

CT := Vf: NON. Ai: N. Yx: N.Jn:N.p ixn = Some(fx) 


We introduce a CT-like axiom in Subsection 3.3.2 for studying the equivalence of 
our two definitions of the arithmetical hierarchy. 


To establish negative results like the synthetic halting problem in Subsection 2.3.3, 
a weaker and purely synthetic axiom, that there exists an enumeration (can also be 
seen as a universal partial function) of partial functions can be assumed [48, 15]: 
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Definition 2.8 There exists an enumeration 9 : N — (N — N) of partial functions: 
EPF := Vf: N=N. di. Oix f 
2.3.3 Synthetic Halting Problem 


Using the enumeration of partial functions EPF, the synthetic self halting problem 
can be defined as whether the i-th partial functions to N — N is defined on input i. 


Definition 2.9 Xi:=>3n.0iibn 
Fact 2.10 The synthetic halting problem is semi-decidable: S(K) 
Proof In the notion of Lemma 2.4, Ai. (011) >= (An. ret *) is a semi-decider. D 


Fact 2.11 The complement of the synthetic halting problem is not semi-decidable: =S(K) 


Proof By Lemma 2.4, assume that there is a partial function f semi-deciding K such 
that Kis fib «. By EPF, let i be given such that 0ii> n e (fi) >= (Au. ret 0) > n. 
After unfolding the definition of K, we get the contradiction Ki e Ki. o 


2.4 Classical Logic 


Some of our results rely on classical axioms. Assuming the law of excluded middle 
LEM allows classical reasoning. For some of our classical results, Markov’s princi- 
ple MP which is a weaker classical axiom is enough. We always carefully label the 
usage of classical axioms. Most of our results are constructive. 


Definition 2.12 LEM := Yp:P.pv-p 


Definition 2.13 MP := Vf: N > B.-(Vx. fx = false) > Jn. fn = true 


Chapter 3 


Arithmetical Hierarchy 


The arithmetical hierarchy was developed independently by Kleene in 1943 [31] 
and Mostowski in 1947 [38]. It classifies predicates on numbers into the classes } „ 
and | |„ according to the number of quantifiers alternations that are required to for- 
mulate them on top of a decidable predicate. The decidability notion in the base of 
the hierarchy differs in multiple equivalent definitions in the literature. Mostowski 
defines the hierarchy in first-order arithmetic with formulas decidable according 
to the ordinary inference rules of first-order logic in the base. Kleene defines the 
hierarchy with predicates decidable by u-recursive functions in the base. 


In the arithmetical hierarchy, many problems of computability theory can be clas- 
sified. For example, consider the predicate h(M,i,s) := "Turing machine M halts 
on input i after < s steps" which is a decidable and can be used as a base for more 
complex predicates. Then, totality — whether a Turing machine M halts on all in- 
puts - can be formulated as Vi. ds. h(M, i, s). The quantifier prefix consists of two 
alternating quantifiers with a leading universal quantifier and hence totality can be 
classified as ] [,. 


There is also another definition of the arithmetical hierarchy known in the literature 
that does not rely on the notion of decidability. For example, Odifreddi [42] men- 
tions as a side note that the arithmetical hierarchy can be solely defined in first-order 
arithmetic with a quantifier-free formula in the base and classifies all first-order for- 
mulas that have all their quantifiers in the front, the so-called prenex normal form. 
This definition is equivalent to the other ones with a decidable predicate in the base 
starting with į and [[,. The 0-levels of the hierarchies differ as pointed out by 
Odifreddi [42]. For example, the formula dn. Vk. n > kis composed of a quantifier 
prefix and a quantifier-free base formula. It consists of two alternating quantifiers 
with a leading existential quantifier and hence the formula can be classified as )’,. 


16 Arithmetical Hierarchy 


In this chapter, we formalize two definitions of the arithmetical hierarchy in con- 
structive type theory. Both hierarchies are defined without relying on decidability 
in a concrete model of computation, in contrast to most definitions in the literature. 
In Section 3.1, we formalize a syntactic definition of the arithmetical hierarchy using 
formulas in first-order arithmetic, with quantifier-free formulas in the base. This 
definition is known in the literature and serves as a sanity check for our second 
definition. In Section 3.2, we formalize a semantic definition of the arithmetical 
hierarchy based on the synthetic notion of decidability, ie. predicates decidable 
by a function N>B. As the second definition classifies type-theoretic predicates 
directly, it is more convenient to establish results in synthetic computability later. 
In Section 3.3, we study the equivalence of both definitions, based on axioms of 
synthetic computability. 


3.1 Arithmetical Hierarchy in First-Order Arithmetic 


Each predicate defined by a first-order formula can be classified in the arithmeti- 
cal hierarchy. For this, the formula needs to be transformed into prenex normal 
form with all quantifiers in front. Then, the predicate can be classified based on its 
quantifier prefix: 


Let n be the number of quantifier alternations in prenex normal form. If the first 
quantifier is an existential then the formula is a )_„-formula else it is a | | ,,-formula. 
If the formula does not contain quantifiers it is both a Y ,, and a | [)-formula 


In Subsection 3.1.1 we will present the inductive definition of first-order formulas 
that we work with. Then, we present a structurally recursive algorithm for trans- 
forming formulas into prenex normal form, in Subsection 3.1.2. The algorithm 
gives an upper bound classification in the arithmetical hierarchy for every first- 
order formula. In Subsection 3.1.3, we set up a syntactic definition of the arithmeti- 
cal hierarchy that classifies type-theoretic predicates that are reflected by a first- 
order formula. 


3.1.1 First-order Arithmetic 


We are working with the definition of first-order arithmetic from the Coq Library for 
Mechanised First-Order Logic [30]: 


Definition 3.1 (Syntax) 

Formulas p,w : F that contain terms tı,t2 : T are defined inductively as follows: 
ttz: T =n |x |ti t2 |tı @to nieN 
ep: Fus lt =t| eav|evp|le>yp|Ve| de 

For convenience, we write o as place holder for À, Y or > and define a type Q ::= W | 3. 
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The syntax presented on paper differs from the syntax of the framework we use in 
the accompanying Coq development in two aspects. 


First, the syntax from the framework generalizes over a signature. This means that 
the basic predicates and functions are variable and can be instantiated appropri- 
ately. For our need, we instantiate the predicates with a single binary predicate = 
and the functions with two binary functions ® and ® such that we obtain the arith- 
metical hierarchy we want. Only the results on prenex normal form conversion in 
Subsection 3.1.2 can be generalized to an arbitrary signature. 


Secondly, the framework does not contain primitive numerals. Instead, it only has 
a zero constant and some syntax for the successor. In our on-paper presentation, 
we however write n for the n-th successor of 0 and n e 1 for the successor of n. This 
change can be seen just as notation or else as an equivalent definition (according to 
the semantics we define below). 


Variable binding is implemented using de Bruijn indices [13] where quantifiers do 
not introduce explicit names for variables they bind. Instead, variables are encoded 
as numbers that correspond to the number of quantifiers that are in scope between 
the usage of the variable and the quantifier that binds it. As quantifiers bind wide 
the whole term after a quantifier is in its scope. For example, Wn. 4k. n = 28 kis 
encoded as V4 x1 =2®xo. A single variable bound by a single quantifier might have 
different de Bruijn indices depending on where it is used. For example, the term 
Yn. n=42v (dk. n= k) is encoded as V xy =42 V (4 x; =x9) where n is translated to 
Xo in its first occurrence and to x; in its second occurrence, because there is another 
quantifier in between. Numbers greater than the number of quantifiers in scope 
correspond to free variables. For example, the formula Y xo £42 A (A x1 = x27 0 xo) 
can be seen to encode Vx. x = 42 A (dz. x = a € z). Note that the free variable x 7 
and the name a have been chosen arbitrarily in the example before. Instead any x; 
with i = 2 (where 2 is the number of bound variables) and similarly any name that 
is not already bound by a quantifier could have been chosen. 


Formally, this encoding is realized by the following two definitions, instantiation 
of variables and the semantics of formulas. 


Definition 3.2 (De Bruijn Instantiation) 
Instantiation of a (parallel) substitution o : N = T on terms is defined as follows: 
n[o]:=n xi[o]:= ci (ti © t2)[0] := tı[o] © t2[0] © E (0,8) 
and on formulas as follows: 
İ[o]:=İ (tı =t2)[0] := tı[o] = tə[o] (eo w)Lo]:= plo] o plo] 
(Vo)[o] := Viel 0) (49)[o] := A(@Lf 07) 


where f} o := xo;Ai. (o i)[ 1] at what t; o maps xy to t and x;41 to oi, and T := Ai. xi4) 
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We write f " :=f o...o f and 1" :=1 0...0 1 for applying f} or 1 for n times. 


The crucial rules are those for the quantifiers. Consider the following example, first 
with explicit variable names: If we want to instantiate y with z ® 1 in the formula 
Vx. x ®y =0, the instantiation is Vx.x0 (20 1)=0. But what if we instead instantiate 
y with x € 1? Simply replacing the sub-term to Vx. x 6 (x € 1) = 0 would be wrong 
as x is a free variable in x € I and should also be free in the resulting term. To 
avoid this kind of problem, traditional on-paper proofs often rely on Barendregt’s 
convention [2] that free variables are distinct from bound variables. But as we work 
formally in a proof assistant, we cannot do so and instead use de Bruijn indices 
which enable a capture-avoiding substitution. 


Reconsider the same example as before but now with de Bruijn indices. The vari- 
able y from before corresponds to the first and z to the second free variable, namely 
xy and x, inthe outer scope. The formula translates to Y x9@x1=0. The instantiation 
that substitutes the first free variable with the successor of the second free variable 
and leaves all other variables in place iso := Ai. if i = 0 then x; @1 else x;. But the 
first free variable occurs under a quantifier that introduces another variable. The 
instantiation only instantiates free variables and to this end should not touch the 
newly introduced variable. With one quantifier in scope, the first free variable is x4. 
Consequently the instantiation o needs to be shifted such that it keeps xy and sub- 
stitutes x;+1 with o i, namely the term by which the i-th free variable would have 
been instantiated by o. However, only shifting o is not good enough yet as we in- 
stantiate a variable with an arbitrary term that could also contain another variable. 
For this reason, the variables in the instantiated term also need to be shifted. This 
is how the instantiation rule for quantifiers operates. In our example, the resulting 
formula is Y xy ® (x2 ® 1) =0. 


Definition 3.3 (Semantics) Term evaluation |-], : T — N and formula satisfaction 
p = +: F > Pon an environment p : N — N is defined as follows: 

[nJp:=n [xulo :=pi [ti e t2], := [t1], + Mal, [ti 8 t2], := [ti], < [m2], 
pFl:1 pF ty =t2:= [ti] = [tale pF pAb := (pE p) a (pE p) 
p E ovy := (p E p) v (p E yp) pF ep>pi=(pF @) > (p E y) 

p E Vp:=Vn.(np)Fo pF o := In. (n;p) F @ 

where n; p is the environment that maps xo to n and x;+1 to pi. 
Note that in the standard Tarski semantics we are using, all connectives are just 


reflected into the type-theoretic level. For that, we rely on the Coq Library for Mech- 
anised First-Order Logic [30]. 
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Again, we slightly differ from the framework in our on-paper presentation. As 
mentioned above, the framework describes a more general setting where a signa- 
ture abstracts the basic predicates and functions in the syntax. Accordingly, the 
semantics is defined with respect to a model that gives an interpretation of the ba- 
sic predicates and functions. For our purpose, we rely on the standard model and 
interpret the predicate = and the functions € and 8 with their corresponding type- 
theoretic equivalent. 


3.1.2 Prenex Normal Form 


Every first-order formula can be transformed to an equivalent formula with all 
quantifiers in the front, the so-called prenex normal form, or PNF for short. As far 
as we have found out, this normal form was first formalized and proved by Skolem 
in 1920 [50] but is attributed to Kuratowski and Tarski [36] by Odifreddi [42]. The 
rules needed for transforming a formula into prenex normal form seemed to be 
folklore already during that time. 


Although we only present the results of this subsection in the standard model of 
first-order arithmetic on paper, all definitions, lemmas and theorems easily gener- 
alize to a general model with other basic predicates and functions as we prove in 
the accompanying Coq development. 


Definition 3.4 (Prenex Normal Form) 
We define a prenex normal form predicate PNF : F — P inductively. A PNF-formula is a 
quantifier-free formula with quantifiers stacked to the front: 


PNF pq PNF ọ noQuant p 
noQuant y noQuant y 
noQuant | noQuant(ty3t2) noQuant (p04) 
for all binary operators o ELA, V, >} 


In 3.4 textbooks [42, 49], for each operator a rule is given to pull out the quantifiers 
by one level. Some of the rules only hold classically. 
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Lemma 3.5 All these rules hold in intuitionistic logic for an arbitrary environment p: 


p E (VEA) > > (V(pAy[T])) ne. > (A(pAv[T])) 
p E (pA(Wp) > (V(e[T]Ay)) E (pA(39)) + (IPLt]ÄW)) 
p E ((Vp)vy) > (W(evy[T])) E ((de)vp) > (A(evyl[t])) 
p E (pv(Vp)) > (V(p[t]vW)) E (ev(3y)) = (I(PLt]vW)) 
pF ((Ye) > y) + (Ao >4[1])) e P) >p) > (W(p > 4[1])) 
pE (e>(Vp)) = (Y(e[t]>4)) pE (e>(Av)) < (A(e[T] > y) 


The remaining directions hold when assuming LEM. 


Proof All proofs are straightforward as the semantics reflects the type-theoretic 
level. o 


The rules proved in Lemma 3.5 give rise to an algorithm for converting a formula 
into prenex normal form that Mostowski - in his paper defining the arithmetical 
hierarchy [38] — revers to as “Kuratowski-Tarski method” [36] and Rogers names 
“Tarski-Kuratowski algorithm” [49]. The algorithm is non-deterministic as also the 
PNF of a formula is not unique. For example, the PNF of (3Wp) A (FW) depends 
on whether the left or right quantifiers are pulled out first. In our implementation 
of a PNF-conversion algorithm, we apply the rules in a fixed order such that the 
algorithm becomes deterministic. 


The algorithm — as derived from the rules — is terminating but not structurally 
recursive. For example, (3Wp) A (a) can be transformed by a single rule to 
A((W@) A (3vp)) and then (Yọ) A (Aw) needs to be converted to PNF recursively, 
which is not structurally smaller. In Coq only terminating algorithms can be de- 
fined. For that reason, structurally recursive algorithms are desirable because ter- 
mination is obvious and does not need to be proven separately. In order to be struc- 
turally recursive, two PNF formulas that are composed together with a binary op- 
erator need to be converted to a PNF formula in a single step. 


We propose a structurally recursive algorithm that computes the quantifier pre- 
fix as a list and the quantifier-free suffix formula separately. When attaching the 
quantifiers to the quantifier-free formula, we get the prenex normal of the initial 
formula. 


Definition 3.6 We define a function - : £(Q) > £(9) that inverts a list of quantifiers 
and another function _++ _ : L (Q) > F = F that stacks a list of quantifiers to the front 
of a formula. 
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O :=[ D0+*oe:=p 
5 eos o art (Vi:L) + p := V(L ++ p) 
bas VEL (4:1) + o t= A(L + p) 


Definition 3.7 (PNF Conversion) We define two auxillary functions c : F > L (Q) 
and cp : F — F that determine the quantifier prefix and the quantifier-free suffix of the 
prenex normal form of a formula. 


el c Lt =i 
cı (ti 3t2):= 0 WERKE 
CL (p Aw) = (cL p) + (cL Y) CF tb = t2 
y cF P = 
cu (P Vp) 3= (cL @) + (cL 19) : lade 
i (o >) Po ++ o (cr pit Te tenit g] 
a (Yo) Vi (cp) cr (Wo) i= cre 
c (Äe) :=3:: (co) cr (IP) :=crp 


Using cı and cr, we then define a function convert : F > F that converts a formula into 
its prenex normal form. 


convert p:= (cL P) + (cF p) 


The trick that makes the algorithm structurally recursive and enables composing 
two sub-formulas in PNF by a binary operator is to detach the quantifier prefix 
from the quantifier-free suffix and compute it separately in a list. This allows that 
the quantifier lists of the two sub-formulas can simply be concatenated in a single 
step instead of pulling out quantifiers one after another which has caused a non- 
structurally recursive algorithm. In the case of >, the quantifiers of the premises 
list need to be inverted (cf. Lemma 3.5). 


The handling of the de Bruijn indices needs more explanation. 


First, we have detailed look at | “(1 *) which is the function application of the 
substitution transformer ff ‘ : (N > T) > (IN > T) to the argument ? KENT. 
The following lemma gives more insight by proving the explicit form. 

Xi ifi < 

(o(i-e)) T" ifize 

Proof If i < £, the proof is by induction on i with £ generalized. If i = £, the proof 
is by induction on ¢ with i generalized. o 


Lemma 3.8 f t ai=] 


Xi fi<t 


Corollary 3.9 tE i= 
y |e Gea ar 
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So ft (1 5) keeps the first ¢ indices in place and shifts the other indices by k. 


With that in mind, we have another look at the renaming in the algorithm. The 
quantifier lists are concatenated such that the quantifiers from the left sub-formula 
are on the left and those from the right sub-formula are on the right. To ensure 
that the quantifiers added between the left sub-formula and its quantifiers do not 
bind anything in the left sub-formula, the de Bruijn indices in the left sub-formula 
are raised above the newly added quantifiers. From the viewpoint of the right sub- 
formula, there is no quantifier added in the scope of its quantifiers. So all bound 
variables are kept in place. However, there are more quantifiers added to the out- 
side, such that the free variables need to be shifted. Let us consider following ex- 
ample: 


The indices of the left sub-formula ọ are shifted by 3 because there are three ad- 
ditional 3-quantifiers added that should not bind anything in q. The first three 
indices x9;x1;x2 of are held in place because they are bound by the inner ex- 
istential quantifiers. The free indices are shifted by 2 because the two additional 
Y -quantifier should not bind anything in y. 


The PNF conversion algorithm presented in Definition 3.7 is quite naive and does 
not minimize the quantifier alternations. For example (for the sake of readability 
with explicit variable naming) convert (3x.Vy. @) A (dz. p) = dx.Vy.dz. (@ Aw) 
but 3x.3z.Vy. (@ Aw) would be an equivalent formula in prenex normal form with 
less quantifier alternations. 


This is caused by simply concatenating the two quantifier lists of the sub-formulas 
of a binary operator. A possible solution would be to merge the quantifier lists in 
a more intelligent way by optimizing the number of quantifier alternations. We 
however leave such optimization to future work, as the de Bruijn renaming as well 
as the verification would be more complicated and would require more work. 


Also note that even if the PNF conversion algorithm would optimize quantifier al- 
ternations, the algorithm would still only give an upper bound classification of for- 
mulas in the arithmetical hierarchy. Finding an equivalent formula with a minimal 
number of quantifiers is undecidable in general. 


The verification of the PNF conversion algorithm consists of showing two proper- 
ties. First, that the result is actually a PNF formula (Theorem 3.11) and second, that 
the result is still equivalent to the initial formula (Theorem 3.13). 


"The Entscheidungsproblem [23] whether a formula is generally valid is known to be undecidable 
due to Turing [56] and Church [8]. A reduction from the Entscheidungsproblem can be done as 
follows. Given a formula q, compute its equivalent formula with minimal quantifiers y. Now ọ is 
universally valid if and only if is quantifier-free and equivalent to the true formula. 
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We start by showing the easier property that the result is actually a PNF formula. 
For that purpose, we first prove that the resulting formula of c_ is quantifier-free. 


Lemma 3.10 noQuant cre 


Proof The proof is straightforward by induction on ọ, after showing that variable 
substitution of a quantifier-free formula does not add additional quantifiers. D 


Theorem 3.11 PNF (convert p) 


Proof After unfolding the definition of convert, the proof is straightforward by in- 
duction on the list and using Lemma 3.10. m) 


Showing that the result is an equivalent formula is a bit more involved and needs 
the right lemma for de Bruijn handling. 


Lemma 3.12 (L+ ọ)[o] = L+ (elf Hs) 


Proof The proof is straightforward by induction on L with o generalized, as each 
application of the instantiation rule for quantifiers (cf. Definition 3.2) adds a ff. o 


Theorem 3.13 When assuming LEM, each formula is equivalent to its PNF-conversion: 
p E y & (convert p) 


Proof The proof is by induction on q. The two base cases are trivial as falsity and 
equality are converted to itself. The case for quantifiers follows directly from the 
inductive hypothesis. The proofs for the binary operators are very similar to each 
other. So we only prove the A-case here: 


It suffices to show p F (convert p)Ä(convert 1p) < convert (pA) by the inductive 
hypothesis. Let Ly := cp, P I= CEQ, Ly := cup, and y! := cp y. The claim reduces 


to: p E (Lo + 0 A(Ly Hb) (Lo + Ly) + Co Cr aw E ler ey) 


We prove the claim by induction on L, and in the []-case by another induction on 
Ly, both inductions with p, p' and y" quantified. If both lists are empty, the claim 
is trivial. In the two remaining cases, either a quantifier is pulled out from the right 
or from the left. Both cases are symmetric but the second one needs a bit more 
attention on the de Bruijn handling. So we only prove the second one. 


24 Arithmetical Hierarchy 


Assume Lọ = Y :: Lọ (the 3-case is analogous). The proof is as follows: 


I 


pE (VL, o ))A(Ly +’) 
= pE VL, + o )A(Ly + ')[1]) Lem. 3.5 
= p E VL, + Ay + y'i lr )]) Lem. 3.12 


o Yn. np E (Li, +e )A(Ly + wien Cr yy) Def. 3.3 
o Vn. n;p E (Lo + Ly) + (o Lt sá Tt tele [Lo +17) Ind. hyp. 
CS Holey ol), Def. 3.3 


In the penultimate step, we apply the induction hypothesis for environment n; p 


and formulas p' and y [f Lol (q )]. In addition, we merge 1 [Lo] and f. 
Also note that in the first step, Lemma 3.5 needs LEM for pulling a V out of an v 
and for pulling any quantifier out of the premises of an >. o 


The general case of Theorem 3.13 for an arbitrary semantical model is equivalent 
to LEM. 


3.1.3 Syntactic Definition of the Arithmetical Hierarchy 


For the syntactic definition of the arithmetical hierarchy, we first define the hierar- 
chy on formulas. 


We define it upwards-closed such that ), € } „4, and | [n < [],4, by defining 
that quantifier-free formulas are )_„-formulas for all n (and similar for [,,). As 
we later only talk about formulas that reflect a predicate, this does not matter (since 
there is always an equivalent formula with an unused additional quantifier) and is 
only for convenience. 


Additionally, we also allow stacking multiple quantifiers of the same type (without 
raising complexity). This is also only for convenience as proved for the semantic 
arithmetical hierarchy in Subsection 3.2.3 which follows for this definition due to 
the equivalence proved in Section 3.3. 


Definition 3.14 (Arithmetical Hierarchy on Formulas) 
We define Y, : F > Pand |], : F > P mutually inductive: 


noQuant ọ MT, o EE. 
En P Èn Jọ Èn dep 
noQuant p In P ¡NE 


Te Pp TL. ve ss ve 
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In the base case, quantifier-free formulas are both } „- and | [,,-formulas. Adding 
an 3 to a ],,-formula adds a quantifier alternation and consequently, the resulting 
formula is ),,- Similarly, adding a Y toa } „-formula adds a quantifier alterna- 
tion and consequently, the resulting formula is [ [,,,;. Ifa formula already is È „41 
another 3 can be added without increasing the complexity. Similarly, if a formula 
already is [],,,, another Y can be added without increasing the complexity. 


To that effect, Y ¿- and | [,-formulas are exactly the quantifier-free formulas. And 
a )_,,)-formula is allowed to have at least n quantifier alternations with a leading 
3. Similarly, a [],,,;-formula is allowed to have at least n quantifier alternations 
with a leading V. 


n+1 


The structure of having a quantifier-free formula in the base case and then allow- 
ing quantifiers added to the front reminds of the prenex normal form. The follow- 
ing fact shows that the formulas in the arithmetical hierarchy are exactly those in 
prenex normal form. 


Fact 3.15 PNEp>(n:N]|),p+[[,0) 


Proof First, note that PNF q on the left is of type P and that we have a dependent 
pair of type T on the right. By the elimination restriction (cf. Section 2.1), induction 
on PNF ọ is not possible by default when constructiong a dependent pair. However, 
a strong eliminator of PNF : F — P to T can be defined by case distinction on 
the formula q which is possible because F : T and PNF is defined inductively on 
the structure of formulas. (We construct the eliminator in the corresponding Coq 
development.) 


Then, the actual proof is straightforward by induction using the strong eliminator 
on PNF q, respectively by mutual induction on ).,„ p and [ [,, y for the other di- 
rection. m 


Because Fact 3.15 is formulated computationaly with a dependent pair, it gives rise 
to an algorithm that — together with the PNF-conversion algorithm from Subsec- 
tion 3.7 — enables an upper bound classification of formulas in the arithmetical hi- 
erarchy. 


Next, we define a syntactic arithmetical hierarchy, that classifies type-theoretical 
predicates that are reflected by a formula in first-order arithmetic. For that purpose, 
we first establish the notion of a reflecting formula. 


Definition 3.16 We call y : F a reflecting formula for p : N“ > P, written p = p if: 
Vv: NÝ. p, E gopyv 

where py i := if i < k then v[i] else 0 is the environment (a function N — N) that looks 

up the value iat the i-th position of the vector or returns a dummy value if it is out of range. 
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Definition 3.17 (Syntactic Arithmetical Hierarchy) 
We lift the arithmetical hierarchy of formulas to predicates p : N“ > Pin type theory: 


YAp:=4p=p.d,9 Ik p := 3 =p. [Ihe 


Note that the upper index k of = and TI; is the arity of the predicate in the style of 
Mostowski [38] but is sometimes used differently in the literature. When the arity is arbi- 
trary or clear from the context, we omit it. 


We do not show many properties of the syntactic arithmetical hierarchy here, as 
they are inherited by the semantic arithmetical hierarchy (Section 3.2) which we 
prove equivalent in Section 3.3. The equivalence proof however needs a lemma. 


Lemma 3.18 Yi p > $k, p and respectively [|< p > [liso p 


Proof Choose the same reflecting formula. The intermediate step Y pọ > ) nye? 
is straightforward by induction on )-,, p and similarly for [],,¢ > [l,.,¿0- O 


3.2 Arithmetical Hierarchy in Type Theory 


In this section, we present a definition of the arithmetical hierarchy in synthetic 
computability. k-ary predicates that are computed by functions build the base. 
Quantifying some arguments of a k-ary predicate leads to a predicate of higher 
complexity. 


In Subsection 3.2.1 we discuss decidable k-ary predicates using which we define 
the semantic arithmetical hierarchy in Subsection 3.2.2. Then, in Subsection 3.2.3 
we prove some properties of the hierarchy. 


3.2.1 Decidable Predicates on Vectors 


In synthetic computability all functions N > B are considered computable (cf. Sec- 


tion 2.3). Vectors N“ consist of finitely many natural numbers that can be encoded 
into a single natural number by Cantor’s pairing function. Thus, functions of type 


N“ > B can be encoded by functions of type N > Band therefore we also consider 
them computable. 


So decidable predicates on vectors are of the following form: 


Definition 3.19 A predicate p : N“ > P is decidable if there is a function f : N“ > B 
such that: p = (An. f n = true). 


When working with predicates on vectors, we assume the following axiom that can 
be derived from functional and propositional extensionality. 
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Axiom 3.20 (Predicate Extensionality) 
PredExt := Vp q : N >P.(Vn.pnegq)>p=q 


The axiom assumes that point-wise equivalent predicates on vectors are equal. This 
becomes handy when applying a constructor of the inductive definition of the se- 
mantic arithmetical hierarchy (Definition 3.21, below) because the predicate can be 
rewritten by a point-wise equivalent one that meets the required syntactical shape. 
Instead, we could have added another rule to the inductive definition of the hi- 
erarchy, that a predicate is in the hierarchy if a point-wise equivalent one is. We 
discuss this design decision in more detail after defining the semantic arithmetical 
hierarchy. 


3.2.2 Semantic Definition of the Arithmetical Hierarchy 
Definition 3.21 (Semantic Arithmetical Hierarchy) 


We define YE : (NÉ > P) > P and fi: ¿(NES P) > P mutually inductive: 


f: N“ >B f:N° 3B 
SS (An. fn = true) Tson. fn = true) 
Erk+1 kt] 
le? In P 
=k = = =k > E 
nj (An. ax. p(x: n)) Ilk (An. Vx. p(x:: n)) 


Note that the upper index k of pes and [I is the arity of the predicate in the style of 
Mostowski |38] but is sometimes used differently in the literature. When the arity is arbi- 
trary or clear from the context, we omit it. 


In the base case, predicates that are computed by a function N“ > B are both in 
>», and [[,. Quantifying the first argument of a k+1-ary [|,,-predicate with an 


3-quantifier (in the type-theoretic level) leads to a Y, ,,-predicate with smaller 


n+1 
arity k. Similarly, quantifying the first argument of a k+1-ary } „-predicate with 
an V-quantifier (in the type-theoretic level) leads to a [ | 


arity k. 


n+1"Predicate with smaller 


Note that compared to our definition of the arithmetical hierarchy on formulas (cf. 
Definition 3.14) there is no native rule that decidable predicates without quantifiers 
are in $. and Il. for alln and no rule that allows stacking multiple quantifiers 
ofthe same kind. Both rules can however be derived as proved in Lemma 3.23 and 
Lemma 3.26. 


The inductive rules are very strict on the exact form of the predicate. For example, 
the quantified variables always need to be combined with the argument vector to a 
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single vector that then gets passed to an inner predicate. The inner predicate cannot 
access the quantified variable directly and needs to decompose the vector again. 


At this point predicate extensionality (Axiom 3.20) can be used to successively 
rewrite the predicate being classified such that it fits the syntactical form of the 
inductive rule. 


For example if we want so show An. Jk. n[0] = 2-k € ee First of all, we rewrite 
the type-theoretic predicate using PredExt to An, Ik, (Am. m[1] = 2- m[0])(k :: m). 
Then by definition of the semantic arithmetical hierarchy it suffices to show that 
Am. m[1] = 2+ m[0] e IJ}. Again by PredExt we rewrite the predicate such that 
it relies on a decidable predicate to Am. (An. "m[1] = 2: m[O])(m) e ]Iz which 
follows by definition. (Note that evenness is decidable and can be shown to be in 
x by giving a function directly.) 

Another example of how we work with predicate extensionality is the following 
lemma. 


Lemma 3.22 S(p) =p € a 


Proof We prove both directions separately. 


> Assume S(p) that means that there is a function f : N“ > N > B such that 
pn e JL fn l = true. By PredExt it suffices to show Al. f n £ = true € Br 
Again by PredExt we can rewrite to An. 3. (Am. (M::n.fn £) m = true)(l::m). 
Which is in the right form such that two inductive rules can be applied suc- 
cessively in order to show that it is a Y; -predicate. 


— Assume p € se By inversion there exists a function f : N**! > B such that 


p = (An. Ae. f (€:: n) = true). The claimed semi-decider is An. f (1:7). o 


We continue relying on PredExt but will not do the rewriting explicitly to apply the 
inductive rules in the subsequent proofs. 


As mentioned earlier, instead of assuming predicate extensionality as an axiom in 
order to make predicates fit the exact form of the inductive rules, we could have 
also added a rule to the definition of the semantic arithmetical hierarchy that says 
a predicate is ye if a point-wise equivalent predicate is Sa formally p € $. A 
(Vi. pi e qn) > q € Y, and similarly of | [,,. We have however decided not 
to do so as this would have added two rules to the definition of the hierarchy that 
would have needed to be considered in proofs. 
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3.2.3 Closure Properties of the Semantic Arithmetical Hierarchy 


In this subsection, we prove several closure properties of the semantic arithmetical 
hierarchy like that, it is closed upwards, under many-one reductions and intersec- 
tion, by adding additional quantifiers of the same type, that bounded quantifiers do 
not increase the complexity, that it the complement of S is [In (when assuming 
LEM), and more. 


We start by proving the two laws that were built-in in the inductive definition of the 
syntactic arithmetical hierarchy but not in the inductive definition of the semantic 
arithmetical hierarchy and have been claimed to not be necessary as they can be 
derived. One is Lemma 3.23 the other ist 3.26. 


Lemma 3.23 Decidable predicates are in the semantic arithemtical hierarchy for any n: 
Y E(Añ. fn = true) and T|X (An. fr = true). 


Proof The idea is to stack quantifiers whose bound variables are not used. The 
proof is by induction on n with k and f generalized. If the base case for n = 0 the 
rule is within the definition of the hierarchy. The inductive case can be rewritten to 
An. Ix. (Ax zn. f 1): 1) e $X, and then follows by the inductive hypothesis 
and the definition of the hierarchy. m) 


Corollary 3.24 x c cde and [In c Faa 


Proof The proof is by mutual induction on > and Tal: The base cases follow 
by Lemma 3.23. The other cases by applying the respective inductive rule of the 
hierarchy’s definition. O 


Next, we prove that stacking multiple quantifiers of the same kind is possible with- 
out increasing the complexity. Intuitively this holds because multiple natural num- 
bers can be encoded into a single one by Cantor's pairing function. The idea is to 
change the decidable predicate at the base such that it first destructs numbers that 
encode pairs appropriately. 


Coming up with the proof shown below, however, needed several attempts. Our 
first proof was by generalizing a single Cantor pairing by a general embedding 
function of N' to N“. Later we found a shorter and more meaningful proof using 
that the arithmetical hierarchy is closed under many-one reducibility. 


Lemma 3.25 The semantic arithmetical hierarchy is closed under many-one reducibility. 
For jek two ae p: N“ > P and q: N° > P such that Pm 4: 

qe Y > pe t andae TI, => pe [To 

Proof The proof is by mutual induction on q € $e and q € II, with p general- 
ized. We only prove the two ) cases, because the two cases for | | are analogous. 
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In the base case, we know An. f n = true is Yor for some fand p <m (An. f n = true), 
namely that there is an encoding e : N“ > N such that pi e f (en) = true. By 
PredExt it suffices to show An. f (e n) = true € > which holds by definition. 


In the other case, we know An. dx. q (x i: n) € eae for some q € Ina nd 
P <m (An. dx. q (x:: n)), namely that ers is an encoding e : NE > E = that 
pne dx. q (x:: (en)). By PredExt is suffices to show An. a q SE a 
which is by the definition of the hierarchy Ax :: n. q (x :: (e n)) € ae . This 
predicate is many-one reducible to q and thus the claim follows a the inductive 


hypothesis. o 
Lemma 3.26 Quantifiers of the same kind can be stacked without raising the complexity: 
PE Yay > Ax An peti) € Yh, and p € [1 > Wx. an pme [Tha 


Proof We only show the claim for Y as the proof for [lis — as assume 
p e )<*!. By inversion there exists a q € I with An. 3x. q ( ye TIX". 

Hence it suffices to show An. 4x 1x2. q (x1:!!xa::n) € 2 +1: By Pred = be claim can 
be rewritten to only quantifying a single number that then is destructed y Cantor’s 
pairing function: An. 3x. (Mx1,x2) = n. q (x1 x2 = n))(x = n) € o By the 
definition of the hierarchy it suffices to show A(x1, x2) :: 1. q (x1 22x ) € Ie, ea 

The claim follows by Lemma 3.25 as obviously A(x1, x2) 2! n. q (xq 22x22: “as <m q. 0 


Next, we prove two lemmas that connect 3 to I. The first lemma states that every 

ig predicate is also a Y. +1 Predicate because it is equivalent to a predicate with 
an unused 3-Quantifier (and similarly for Y and | | swapped). The second lemma 
states that — in classical logic — $, is exactly the complement of Ple 


Lemma 3.27 [Is je SE a and şr c [IK 


Proof Assume p € | [<. By Lemma 3.25 also Ax :: ñ. pn € | [£*?, because the two 
Peete are many-one reducible. Consequently, by definition of the hierarchy 


k+1 


An. dx. (Ax :: n. pn)(x::n) € > +1- The predicate is equivalent to p. Thus, the 
claim follows by PredExt. The proof of the other claim is analogous. Oo 


Lemma 3.28 Forn < 1 and else assuming LEM: pe a > pe Il. 


For n = 0, for n = 1 assuming MP, and else assuming LEM: pe [[, > pe), 


Proof In the n = 0 cases, by inversion there exists a function f that computes p 
such that such that pn = (fn = true). By case distinction on fn, apn © (fn = false). 
Consequently, An. ! (fn) decides An. apn and both claims follow by the definition 
of the hierarchy. 
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In the p € = case, by inversion p = (An. dx. q(x::n)) for some q € ÍI. We have 
just shown that consequently An.-qn € ).,. The claim follows by PredExt and the 
following intuitionistic fact: dx. q(x i: n) e Vx. =q(x:: 1). 


In the p € El; case, by inversion p = (An. dx. f(x::n) = true) for a function f. Now, 
MP states that =(Wx. g x = false) > Ax. =(g x = true) for a function g : N > B 
(the back direction holds in intuitionistic logic). The claim follows together with 
PredExt when choosing g := Ax. f(x :: n) for a fixed n. 


For the general case, the proof is by mutual induction on p € A and p € I The 
base cases have been shown above. Inthep € Y. +1 case, the claim can be rewritten 
similarly as above and without using classical axioms to An. Vx. =q(x::n) € HT» 
which reduces to the induction hypothesis by the definition of the hierarchy. The 


p € [],41 case is similar, but rewriting the claim form An. =(WVx.p(x::n)) € Xha 
into An. Vx. =p(x::1n) € } „4; relies on LEM. O 


We have shown p € ÍI, > pE > by assuming MP in Lemma 3.28. Actually, 
assuming S(p) > S(p) - which seem to be weaker than MP - would have been 
enough and is equivalent to the statement for n = 1. 


The general case for n = 2 also seems to be weaker than LEM because LEM is about 
arbitrary predicates and not only about predicates in the arithmetical hierarchy. 
Akama et al. [1] present an arithmetical hierarchy of classical axioms that seems 
to be related. 


Lemma 3.29 The semantic arithmetical hierarchy is closed under intersection, formally: 

pe >, AGE D7 An pnaqne X andpe [faqe [[, > An-pnaqne [fn 
Proof The proof is by induction on n generalized over p and q and followed by 
inversion on the assumptions. In the base cases, construct a function that returns 
true if and only if the two functions deciding p and q return true. In the other cases, 
pull out the quantifiers similarly to the PNF rules in Lemma 3.5. Then we obtain 
two quantifiers of the same kind. Consequently, the claim follows by Lemma 3.26, 
the definition of the hierarchy, and the inductive hypothesis. O 


Showing that the arithmetical hierarchy is closed under union - when connecting 
two predicates with a logical or — would be very similar. However, pulling a uni- 
versal quantifier from a logical or needs classical assumptions (cf. Lemma 3.5). 


For proving Post's Theorem later in Chapter 5, we need to show that if p € S so 


is the predicate lifted to lists AL. Vi € L. pn e Y,.” For that, we first prove that 


“To be exact, this does not type check and we implicitly assume an encoding of vectors into num- 
bers and lists of vectors into natural numbers. Here and in the following, we abuse the notation and 
treat them as first-class. 
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adding bounded quantifiers to a predicate does not increase its complexity. 


Lemma 3.30 Bounded universal ns do not increase the complexity, formally 
pe), > (AN: ne n) DE 


and pe [], > AN =n. Vx <N. p(x::n)) € ||, 


Proof First, observe that adding a bounded quantifier to a decidable predicate re- 
mains decidable as checking finitely many values can be done recursively. Then, 
the proof idea is to push the bounded quantifier all the way down to the decidable 
base predicate. wien lifting a bounded quantifier over a normal quantifier e.g. 
Vx < N. dy. p(x: y :: n), we can instead quantify over a vector y of N numbers 
where the x-th need in the vector corresponds to the y associated with the num- 
ber x < N, e.g. dy. Vx < N. p(x :: yix] =: ñ). o 


Lemma 3.31 Predicates can be lifted to lists: pe Y, > AL. Wie L.pne Y, 


Proof The proof idea is to rewrite the claim such that it has a bounded quantifier: 
AL. Vi < |L|. p (L[i]) and then apply Lemma 3.30. Formally, the proof needs some 
more carefulness on encoding and decoding vectors and lists of vectors. The coding 
does not increase the complexity of the predicate as the hierarchy in closed under 
many-one reductions by Lemma 3.25. o 


3.3 Equivalence of Both Definitions 


We have defined two versions of the arithmetical hierarchy, in the previous sections. 
A syntactic definition explicitly in first-order arithmetic and a semantic definition 
using notions of synthetic computability. In this section, we study the equivalence 
of both definitions. 


Whenever relating synthetic computability to a concrete model of computation or 
first-order arithmetic, an axiom is needed that expresses that all functions that are 
considered computable in synthetic computability are in fact computable in a con- 
crete model of computation. We discuss this in Subsection 3.3.2. 


Also, observe that the equivalence does not hold in the base case. There are decid- 
able predicates than cannot be expressed as a first-order formula without quanti- 
fiers. For example, consider the decidable evenness predicate on numbers, it can 
only be expressed as ik. n=2 8 kor Yk. n=28k@® 1> | but not without a quan- 
tifier”. Asa consequence we can only show that our semantic definition includes 
the syntactic one starting with » and || 17 in Subsection 3.3.3. This is an inherent 


*Evenness can be expressed with a bounded quantifier though, but we do not have bounded quan- 
tifiers in the syntactical arithmetical hierarchy. 
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artifact of defining the syntactic hierarchy with a quantifier-free formula in the base 
and was observed e.g. by Odifreddi [42]. 


The other directions that the syntactic definition includes the semantic one, how- 
ever, can be shown directly without relying on any axioms and for all)_ „ and [],- 
We do so in Subsection 3.3.1. 


3.3.1 Inclusion of the Syntactic in the Semantic Hierarchy 


In this subsection we show that every predicate p € )_,, that is reflected by a first- 
order formula ¢ € )_,, also is in the same level of the semantic arithmetical hierar- 
chy, that is p € ),,, and similar for [ ],. 


Intuitively this holds because quantifier-free first-order formulas in the standard 
model are decidable as they only consist of some computable functions (® and 
8) and a decidable equality predicate on numbers = (Lemma 3.32). Quantifiers 
that are stacked before a quantifier-free base reflect the type-theoretic ones so the 
quantifier prefix can be translated into the semantic hierarchy one by one. 


Lemma 3.32 Quantifier-free formulas are decidable: noQuant > Vp. D(p E q) 


Proof The proof is by induction on y using the equality decider for numbers in the 


=-case. The quantifier cases are contradictory by inversion on noQuant q. O 
Theorem 3.33 Y, < Y and[L, < II. 


Proof As in the syntactic hierarchy predicates are reflected by formulas, it suffices 


toshowp €), >M.pi HE DY), andg €[], 7 An. p; Fpe [[, by mutual 
induction on y € [[,and y € È. 


In the base cases, quantifier-free formulas are decidable by Lemma 3.32 so the claim 
follows for Y ¿and [ |, and hence for any n by Lemma 3.23. 


There are two ), , ,-cases where it remains to show An. p; F Jọ € =. +1- Mone 
case p € ) „,, and in the other case y € [],,. By the definition of the semantics, 
the claim reduces to An. Ix. (x;px) E p € Y, with a type-theoretic 3-quantifier. 
The claim follows by Lemma 3.26 in one case and by the semantic definition of the 
hierarchy in the other case. The [ [,, , ,-cases are analogous. o 


3.3.2 Axiom Relating Decidable Predicates to First-Order Arithmetic 


The Church-Turing thesis [7, 56] states that all intuitively computable functions are 
indeed computable in a concrete model of computation (e.g. in the A-calculus or 
by a Turing machine). In constructive mathematics, this thesis was made formal by 
Kreisel [35] as an axiom called CT stating that all functions N — B are computable 
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in a concrete model of computation. CT can be assumed consistently in the setting 
we are working with [62, 53, 17]. 


We assume a CT-like axiom, we call first-order arithemetical CT (ACT), that every 


function of type N“ > Bis reflected by a formula p € } ,. This axiom is not known 
in the literature but can be probably derived from a more common version of CT 
as we discuss at the end of this subsection and therefore seems to be consistent. 


Axiom 3.34 ACT :=An.fn=trueee), 


The same for [ [, follows directly. 
Lemma 3.35 Vf. (An. fn = true E€ ),) > Vf. (An. fn = true € [],) 


Proof We equivalently prove An. !f n + true € [],. And gain from the assumption 
that An. !(fn) = true € ),. Now the claim follows as (4x. =p x) > Vx. p x holds 
in intuitionistic logic. O 


Now, Axiom 3.34 and Lemma 3.35 give the base case of the inclusion of the semantic 
in the syntactic hierarchy for n = 1. 


Corollary 3.36 When assuming ACT: $, SY, A Il, cl], 


Proof Follows by inversion and by the fact that multiple 3 (or V respectively) can 
be stacked without increasing the complexity. m) 


We are confident that in future work our axiom ACT can be reduced to a more 
common variant of CT. In his Bachelor’s thesis, Peters [45] derives a similar fact, 
namely that when assuming a common variant of CT, each synthetically enumer- 
able predicate is in } } for an arithmetical hierarchy built on Q-decidable formulas 
by combining the work of Larchey-Wendling and Forster [37] - who have proved 
that u-enumerable predicates are Diophantine (as a part of their mechanization 
of Hilbert’s tenth problem in Coq) - with the work of Kirst and Hermes [29] — 
who have mechanized a many-one reduction of Hilbert’s tenth problem to the Q- 
fragment of first-order Peano arithmetic and using representability results by Her- 
mes and Kirst [22]. Combining all those works, ACT could confidently be derived 
from a common variant of CT. 


3.3.3 Inclusion of the Semantic in the Syntactic Hierarchy 


In this subsection, we show that every predicate p € x is reflected by a first-order 
formula p € ) „, when assuming ACT. The actual proof and consequently also this 
subsection is very short as the base case already follows by Corollary 3.36. 
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Theorem 3.37 When assuming the ACT: e ©) 4, and ghee E TL 


Proof The proof is by mutual induction. The base cases follow by Corollary 3.36 
and the CT-like axiom. The other two cases follow directly by the inductive hy- 
pothesis as the semantics of first-order formulas reflects the type-theoretic level. o 


Chapter 4 


Oracle Machines and Turing Jump 


In Section 2.3 we have introduced synthetic computability, the setting we are work- 
ing in. The main idea of synthetic computability was to treat all (partial) functions 
N — N (and N = B) as computable. This works very well when studying only com- 
putable problems. 


This chapter on the other hand will introduce notions that allow talking about un- 
computable problems synthetically. In Section 4.1 we set up synthetic oracle com- 
putability and then define a synthetic notion of the Turing jump in Section 4.2. 


4.1 Synthetic Oracle Computability 


In order to study relative computability, Turing came up with the idea of oracle 
machines [57] which was developed further by Post [46]. Oracle machines are 
adapted Turing machines [56] with an additional operation for querying an oracle 
solver for a given problem. 


Having such a model of computation, the notions of oracle semi-decidability and 
Turing reducibility follow. A problem P is (oracle) semi-decidable relative to a 
problem Q if P can be semi-decided by an oracle machine with an oracle for Q. 
Likewise, a problem P is Turing reducible to a problem Q if P can be decided by an 
oracle machine with an oracle for Q. 


Equivalently Kleene [33] builds relative computability on partial u-recursive func- 
tionals. A partial u-recursive functional is variable in a partial function on num- 
bers and can be obtained from the given function and some primitive functions 
by composition, primitive recursion and unrestricted u-recursion. In this context, 
partial functions are set-theoretic so not necessarily computable. Only when the 
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given function (and all primitive functions) are computable, then also the partial 
u-recursive functional is computable. 


Although we are using constructions more related to partial u-recursive function- 
als, we still speak about “oracles” as we believe that the notion is more intuitive. 


In this section, we set up a synthetic version of oracle computability. Our work 
builds upon a synthetic definition of Turing reducibility by Forster [16] which was 
developed in joint work with Kirst following an idea by Bauer [4]. We first present 
the notions and then discuss how they are derived as an adjustment of the definition 
by Forster and Kirst in Subsection 4.1.5. 


4.1.1 Oracle Machines 


Oracle machines are the central concept of oracle computability. We present its syn- 
thetic definition and then explain the intuition behind it in detail. 


Definition 4.1 (Oracle Machines : My) Given Types X, Y and Z: 
An oracle machine M : MY consists of a relation transformer and a computational core 


and needs to fulfill the following properties: 
e core specification 
VFR.fPR> M.fpMR 
e continuity 


VRxy. MRxby> JLE Dom(R). VR, =, R. MR2x> y 


Functional relations are the potentially uncomputable counterpart to partial func- 
tions. The relation transformer takes a functional relation as an input which can 
be seen as a potentially uncomputable oracle. It then returns another functional 
relation, a solver for another potentially uncomputable problem. So the relation 
transformer M provides information about the "observable behavior" of the oracle 
machine M. We write MRx » y in order to express that M halts given an oracle 
relation R on input x with output y. 


But the relation transformer cannot return a solver of an arbitrary uncomputable 
problem. Intuitively the only non-computable operation an oracle machine is al- 
lowed to do is querying the oracle. Thatis why we require the relation transformer 
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to agree with its computational core on computational input according to the core 
specification. 


Intuitively, whenever an oracle machine halts (given a fixed oracle and input) it can 
only have queried the oracle finitely many times and the oracle has answered all 
queries. Formally continuity requires that there is a list containing oracle queries 
such that the oracle machine halts with the same output when changing the oracle 
to another oracle that agrees on the queries in the list. 


Continuity of the core follows: 


Lemma 4.2 The core of M : Mey is continuous, formally: 
Vfxy. M¿fxby> ALS Dom(f). Vf, xı f. M¿f2xb y 


Proof Follows by the core specification and continuity of the relation transformer. 
O 


The reader might see synthetic oracle machines as a synthetic version of partial u- 
recursive functionals as both are variable in an oracle and computable if the oracle 
is. The definition of synthetic oracle machines axiomatically requires the relation 
transformer to be continuous. Partial u-recursive functionals are monotone and 
compact by construction which is due to Kleene [33] and Davis [12]. The following 
fact that Odifreddi [42] attributes to Uspenskii [59] and Nerode [41] states that 
both notions are equivalent. 


Fact 4.3 Continuity is equivalent to monotonicity and compactness 
M is continous > (VRR.RER > MREMR) 
A(VRxy. MRx»y> JR ER. (AL. Va.a E Le Ab. RE ab) AMR, yz) 


The type Mor of oracle machines is parametric in the argument type A and return 
type B of the oracle and on the input type X and the output type Y of the actual 
machine. We omit the types A, B and X when they are clear from the context and 
only annotate the type parameter Y. We often choose B := B as we want the oracle 
to be a decider of a given problem. In subsection 4.1.2 we choose Mg in order to 
define Turing reductions and in subsection 4.1.3 we choose My in order to define 
oracle semi-decidability. 


4.1.2 Turing Reductions 


A decision problem P is Turing reducible to a decision problem Q if there exists an 
oracle machine that computes the characteristic relation of P when given an oracle 
for the characteristic relation of Q. 


Definition 4.4 (Turing Reductions) Given P : X => P and Q : A = P we define: 
P=7Q:=3IM: “Mx B.MQ=P 
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Here and in the following, we identify predicates Q : A > P with their character- 
istic relation Aa b. b = true Qa. 


Lemma 4.5 P<„Q- Px<rQ 


Proof By definition of P <,, Q there is a function f : X — A that translates an 
instance of P to an instance of Q such that Vx. Px Q (fx). In order to show Turing 
reducibility we construct an oracle machine of type Mg. Choose MRx := R (f x) 
and M, rx := 1 (fx). The core specification is easily fulfilled, for continuity choose 
the singleton list containing f x. 

It remains to show that MQ x = Q (fx) agrees with P which follows from the fact 
that Px e Q (fx). O 


Using classical assumptions we can prove that each predicate is Turing equivalent 
to its complement. 


Lemma 4.6 LEM > P<-PAP<7P 


Proof For both directions the same oracle machine M : Mg suffices. Given by 
MRx> b:=Rx(!b) and M¿rx:=rx>=Ab. ret !b. 

The core specification follows from the specification of >= and ret . For continu- 
ity, if MRx » b the oracle R was queried for x and has answered with !b. It re- 
mains to show that M computes the characteristic relation, so MP x P which is 
Yx b. Px (!b) @ Px band MP P which is Vx b. P x (!b) > Pxb. For both reduc- 


tions this reduces to showing both P x > P x, which is trivial, and Px + P x, which 
is double negation elimination and equivalent to LEM. o 


4.1.3 Oracle Semi-decidability 


A decision problem P is oracle semi-decidable relative to a decision problem Q if 
there exists an oracle machine that halts on x if and only if P x when given an oracle 
for the characteristic relation of Q. 


The actual output of the oracle machine does not matter. Therefore we choose 1 as 
the return type, having only a single value x : 1. 


Definition 4.7 (Oracle Semi-decidability) Given P : X > PandQ: A > P: 
So(P) := IM: M1. Vx. Px 9>MQx> x 


Lemma 4.8 Ifthe oracle is decidable, oracle semi-decidability and semi-decidability agree: 
S(P) > SQ(P) and D(Q) > Sa(P) > S(P) 


Proof We prove both claims separately: 
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e For the first claim, by S(P) and Lemma 2.4 there is a partial function f : X= 1 
semi-deciding P such that Vx. Px=f x> x. Itis enough to construct an oracle 
machine of type My that semi-decides P by ignoring its oracle and consulting f. 
Choose M Rx» x := Pxand M, Rx := fx. As M ignores its oracle, continuity 
is trivial. The core specification reduces to Vx. Px > f x > x which is exactly 
the specification of f. 


e For the second claim, by definition of D(Q) there is a function d: A > B 
that decides Q such that Va. Qa da = true. Assuming Sy(P) there is 
an oracle machine M that semi-decides P when passing an oracle for Q i.e. 
Px MQx» x. Again by Lemma 2.4 showing S(P) reduces to finding a 
partial function f : X= B such that Vx. Px <> f x > x. By the core specification 
M: (Aa. ret (d a)) suffices, as dis a total function deciding Q. O 


Lemma 4.9 Pi $m P2 > SQ(P2) > Sa(Pı) 


Proof The proof essentially does not differ form the respective property of semi- 
decidability without oracles. Assume P1 <m P2, that there is a function f such that 
Vx. P1 x > P2 (fx) and assume Sy (P2), that there is an oracle machine M : My that 
semi-decides P relative to Q such that Vy. Poy => MQy» x. 

The oracle machine M' : Mz with relation transformer M'Rx» x := MR(f x) > x 
and core M'. rx := Me r (f x) is a semi-decider for Pı relative to Q. The core 
specification and continuity follow from the respective properties of M. o 


Lemma 4.10 Qı <T Q2 > Sq,(P) > Sg,(P) 


Proof Assume Q; <7 Q2 ie. that there is an oracle machine My : Mg that computes 
the characteristic function of Qı when given an oracle for Q, and assume Sg, (P) 
i.e. that there is an oracle machine Ms : My that semi-decides P relative to Q;. 

The oracle machine M : My with relation transformer M Rx» x := Ms (My R)x» x 
and core Me rx := Ms. (Mr. T) x is a semi-decider for P relative to Q2. The core 
specification follows from the respective property of Ms. 

For continuity, given R and x such that MRx » * we need to find a list of oracle 
queries to R. By continuity of Ms there exists a list Lm, of oracle queries to My R 
such that Mr R halts on all queries. This fact is important here because halting is a 
precondition for the continuity of My which says that there exists a list of queries 
to R for each query to Mr R that halts. The claimed list can be constructed by con- 
catenating the lists obtained by the continuity of Mr for each element inLm,. O 


Corollary 4.11 LEM > Sa(P) > Sa(P) 


Proof A direct consequence of Lemma 4.6 and Lemma 4.10. o 
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Instead of choosing 11 as the return type of oracle machines used for semi-decision, 
we could have defined oracle semi-decidability with any other inhabited type. Par- 
ticularly, we could have chosen B and reused oracle machines with the same type 
as for Turing reducibility. However, we have chosen M4 to emphasize at the level 
of types that the oracle machine is used for semi-decision only and does not carry 
other information. 


Lemma 4.12 Given predicates Q : A > P, P : X = P and an inhabited type Y: 
SQ(P) e JM: Mer. Yx.Pxo> Ay. MQx> y 


Lemma 4.13 Given predicates Q : A > P,P: X= P and a discrete type Y with value y: 
So(P) => IM: MY. Vx.Px>MQxb y 


4.1.4 Determinacy of Oracle Machines by Their Cores 


In this subsection, we study general oracle machines in more detail. The key result 
is Corollary 4.18 that oracle machines with the same core behave equally. Remark- 
ably, all of the following results are constructive and solely enabled by carefully 
choosing the continuity requirement of oracle machines. 


The key idea is to express the relation transformer only by using the computational 
core. This is possible because due to continuity the oracle has only been queried 
finitely many times if the oracle machine halts. In addition, continuity ensures that 
on all these queries the oracle has either answered true or false. 

Therefore, if the oracle machine halts, there exist two lists Ltrue and Lfalse containing 
all queries whose answer was true or false. From those two lists, a partial function 
can be constructed that searches for the answer in one of the finite lists and is unde- 
fined if no answer is found. This function can be passed to the computational core 
which agrees with the relation transformer due to monotonicity (Fact 4.3). 


We first define a partial function lookup that takes two lists Ltrue and Lralse containing 
the elements on which the partial function should return true or false and that is 
undefined elsewhere. The argument type needs to be discrete in order to check 
whether a value is in one of the lists. 


Definition 4.14 Given a discrete type A, define lookup : Z (A) > .Z(A) > A=B: 


rettrue ¡fa € Ltrue 
lookup Ltrue Lfalse A := $ ret false if a € Lfalse 
undef else 


Lemma 4.15 Given a discrete type A, two disjoint lists Ltrye and Lralse and a value a: A: 


e lookup Lirue Lfalse a > true a € Line 
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e lookup Lirue Lfalse A > false > a E Lfalse 


Next, we prove a lemma that allows us to split the list from continuity into two lists 
Ltrue and Lfalse- 


Lemma 4.16 Given a list Land a functional relation R : A ~ B with a discrete argument 
type A such that Wa € L. Jb. R a b, there exist two lists Lirue and Lfalse that can be 
constructed constructively and are fulfilling the following properties: 


e Va E Line. R a true 
e Va € Lease. R a false 
e Va€lL.a€ Lire Y a € Lfalse 


e Va. =(a € Lire A a € Lfalse) 


Proof by induction on L. 

Base case: Choose Lirue := [] and Lgalse := [] 

Inductive step L = a:: L: 

By the inductive hypothesis, there are two lists Ltrye and Lralse that fulfill the prop- 
erties for L'. By assumption Jb. R ab. If b = true add a to Ltrue else to Lfaise- The first 
three properties are trivial. Disjointness follows by the functionality of the func- 
tional relation R. o 


Next, we show that the relation transformer of oracle machines (with a discrete 
oracle argument type) can be expressed only by talking about its computational 
core. 


Theorem 4.17 Given M: MY with a discrete oracle argument type A, constructively: 


MRxP y © Ilerue Lfalse- (Va. a € Liye > Ratrue) A (Va. a € Lilse > R a false) 
AM. (lookup Ltrue Lfalse ) xb y 


Proof We show both directions of the equivalence independently: 


— Assume MR x» y. By continuity there exists a list L such that Va € L. Jb. Rx b 
and VR' 2, R. MR'x»y. By the first property together with Lemma 4.16 there 
are two lists Ltrue and Lfalse that fulfill the first two claims and the premises of 
the lookup specification Lemma 4.15. 

It remains to show M. (lookup Ltrue Lfalse) x > y. By the result of Lemmas 
4.15 and 4.16 lookup Ltrue Lfalse computes the oracle R on all argument in L. 
Therefore by continuity and the core specification the claim follows. 
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— Assume there are two lists Lirue and Liaise such that for all elements of Lire 
the oracle R outputs true and false for all elements in Lyaise. Also assume 
Me (lookup LtrueLfalse) xe y. 

Together with the lookup specification Lemma 4.15, lookup Ltrue Lfalse computes 
R on all arguments in the lists. The claim now follows by the core specifica- 
tion and monotonicity (Fact 4.3). O 


Therefore, oracle machines with extensionally equal cores are extensionally equal. 


Corollary 4.18 Oracle machines with same core behave equally: 
Given two oracle machines M and M' : My with a discrete oracle argument type: 
Me zM > VRMR=MR 


Also, we can construct an oracle machine for each continuous core. 


Lemma 4.19 Given a continuous partial function f with a discrete oracle argument type: 
(M: MY | Mc =f} 


Proof Choose the relation transformer as specified by Theorem 4.17. Functionality 
of the relation follows by monotonicity of f (Fact 4.3) on lookup in the concatenation 
of the given oracle lists. The proof of the core specification is similar to the proof of 
Theorem 4.17, continuity follows by concatenating Liye and Lfalse- oO 


4.1.5 Comparison to Related Work 


Our definition of oracle machines is a slight modification of the Turing functionals 
that Forster [16] uses in his definition of Turing reducibility developed in joint work 
with Dominik Kirst. Their definition goes back to an idea by Bauer [4]. 


Bauer does not work in constructive type theory but in the intuitionistic effective 
topos. He first came up with the idea of defining synthetic Turing reductions in 
two layers as a transformer of solvers of potentially uncomputable problems that 
factors through a computable core on computable oracles. 


More precisely, Bauer’s oracles O := {(So, S1) € P(N) x P(N) | So N Sı = Ø} are 
pairs of disjoint sets of numbers containing partial positive and negative answers. A 
Turing reduction r : O > O is a map taking an oracle and returning another oracle. 
When passing a pair of two disjoint enumerable sets also the result is required to 
be a pair of two disjoint enumerable sets. Similar to our oracle machines r needs to 
be continuous in the notion Bauer uses i.e. it needs to preserve directed suprema. 


The Forster-Kirst definition of Turing functionals was mainly taken as the oracle 
machines we are working with: 
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Compared to our oracle machines the return type of Turing functionals is fixed to 
B. This is however only a cosmetic difference since we later instantiate the return 
type with B for Turing reductions and 1 for oracle semi-decidability. As discussed 
in the Remark at the end of Section 4.1.3, we could have also chosen B as a return 
type for semi-decidability and therefore used the Forster-Kirst definition as it is, for 
that matter. 


What paid off, however, and enabled the constructive results of Subsection 4.1.4 was 
adapting the definition of continuity. Forster and Kirst are working with a construc- 
tively weaker definition of continuity with a double-negated existential quantifier. 
They call F continuous, here called weakly continuous if: 


VRx.--3L. YR2. (Va E Lb.Rab-—> Rab) VWy.FRx»by>=> FR>x>b y 


The following proofs show that our definition of Turing reducibility <y implies 
the Forster-Kirst definition, which we call <rx, and that they are equivalent when 
assuming the law of excluded middle. 


Fact 4.20 Given F : (Y ~ W) > (X ~ Z): Fis continous > F is weakly continous 


Proof Showing a stable claim allows local classical reasoning. The interesting ques- 
tion is (dy. FRx» y) v =(3z. FRx» y). In the first case, the assumption gives a list 
that suffices, the second case is contradictory when choosing e.g. the empty list. 0 


Corollary 4.21 P ST Q — P <FK Q 


Fact 4.22 When assuming LEM and given F : (Y ~ W) > (X ~ Z): 
F is weakly continous — F is continous 


Proof LEM allows dropping the double negation and case distinction whether the 
oracle halts for the elements in the list. Therefore constructing a list that contains all 
necessary elements on that the oracle halts is possible. This list is sufficient because 
both definitions only talk about other oracles that agree when the oracle has known 
the answer. m) 


Corollary 4.23 LEM > P <FK Q — P ST Q 


Strengthening the continuity definition compared to Forster and Kirst has enabled 
Theorem 4.17 and Corollary 4.18. On the other hand, showing the stronger notion 
of continuity does not seem to make proofs more complicated. For all oracle ma- 
chines that we have constructed, knowing that the machine halts was good enough 
to construct a list of queries. 


With the weak continuity notion by Forster and Kirst oracle machines with the same 
computational core only behave weakly equally: 


Fact 4.24 YM M': Mpk. Me x M'e > VRxz.-MRxbzo-M'Rxbz 
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4.2 Turing Jump 


In this section, we set up a Q-complete predicate, such that every predicate that 
is semi-decidable relative to Q is many-one reducible to the Q-complete predicate. 
Such a predicate is called the jump of Q, written Q' and is due to Post and Kleene. 


In his preliminary report from 1948 [47], Post has first reported that he has set 
up a Q-complete predicate. The first construction of a Q-complete predicate using 
Kleene’s T-predicate was published by Kleene in his book "Introduction to meta- 
mathematics" in 1952 [33]. In the Kleene-Post paper from 1954 [34], a jump oper- 
ator was introduced and it was proven that if two predicates are Turing reducible 
so are their jumps. 


In textbooks [42, 9, 51] the Turing jump is defined as the halting problem of oracle 
machines. In this section, we translate the definition to our synthetic setting. We 
take the "normal" synthetic halting problem 2.3.3 as an orientation that is built upon 
an enumeration of partial functions. 


In Subsection 4.2.1 we address enumerating oracle machines. In Subsection 4.2.2 we 
define a synthetic version of the Turing jump and show that it gives rise to a harder 
problem. In Subsection 4.2.3 we then prove that the jump of Q is Q-complete. 


4.2.1 Enumerating Oracle Machines 


To formulate the halting problem of oracle machines (aka the Turing jump), we 
need to have a notion connecting oracle machines to natural numbers, their codes. 
Similar to the construction of the synthetic halting problem in Subsection 2.3.3 us- 
ing EPF, we would like to enumerate oracle machines. 


As we are only interested in whether an oracle machine halts and not in the actual 
output, we again choose 1 as the return type. 


In Subsection 4.1.4 we have seen that oracle machines with the same core behave 
equally. Therefore an enumerator for computational cores suffices to construct an 
enumerator for oracle machines. Unfortunately, it is not known how an enumera- 
tor for higher-order partial functions can be constructed only by assuming known 
axioms like EPF. 


Axiom 4.25 There is a function E : N > (N — B) > (N—1) that is: 


e surjective Vf: (N=B)> (N—1). fis continous > Hi. Fi =f 


e continuous Vigx.&igx> «> AL SC Dom(g). Vg2 =, g. Gt gz xp * 


First of all, we upgrade & to a parametric enumerator. This allows us to construct a 
parametric enumerator for oracle machines that enables SMN-like reasoning later. 
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Definition 4.26 & (j,i) fx := Gif (j,x) 


Lemma 4.27 Sd is parametric: 
VF: N> (N=B) > (N-1). (Vi. Fi is continous) > Ay. Vj. &' (yj) = Fj 


Proof Let F: N — (N—B) > (N—1) be given. Because ¿ is surjective there exists 
a code i for the function Af (j, n}. Fj f n such that Vfjn. Zif (j,n)px«»Fjfnp«. 
Choose yj := (j,i). Now, givenj, f,andn: &'(yj) fn = &'(j,i) fn = &if(j,n)=Fjfn 

O 


Corollary 4.28 & is surjective: Wf: (N — B) > (N—1). f is continous > Hi. E i=f 


Proof After choosing Fj := f, the claim follows by Lemma 4.27. O 
Lemma 4.29 ¿'iscontinuous: Wifx.E ifxbx*>3L Dom(f). Vfo= Ff. & ifs y>* 
Proof After unfolding the definition of &',the claim follows respectively from the 
continuity of &. m) 
Next, we construct a (parametric) enumerator for oracle machines. 

PRSE = N,B 
Definition 4.30 2: N > Mya 
Proof By Lemma 4.19, there is an oracle machine for each continuous computa- 
tional core. Therefore, we can upgrade the i-th computational core given by ¿' 
(that is continuous because of Lemma 4.29) to the i-th oracle machine. 
Lemma 4.31 = is parametric: WF: N => MN. dy: NON. VLC yy = Fi 


Proof Follows from the parametricity of & (Lemma 4.27) and Corollary 4.18 saying 
that oracle machines with the same core behave equally. o 


Corollary 4.32 E is surjective: WM: Hin: di. 2i=M 


Proof After choosing Fj := M, the claim follows by Lemma 4.31. O 


4.2.2 Synthetic Turing Jump 


We define the Turing jump of Q as all numbers i such that the i-th oracle machine 
halts on input i. 


Definition 4.33 (Turing jump) Q’i:=ZiQi»« 


Next, we prove that jumping gives rise to a harder problem, namely that the jump 
Q' is semi-decidable relative to Q, but its complement is not. 
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Lemma 4.34 So(Q') 


Proof The oracle machine given by MRi:=ZiRiandM.fi:= (Zi). fiisasemi- 
decider. The core specification and continuity follow from the respective properties 
of Zi. o 


Lemma 4.35 =S9(Q') 


Proof Assume that there is an oracle machine M that semi-decides Q' when given 


an oracle for Q, i.e. Vi.M Qi» x oQ' i. Letibe the code of M, it exists because of 
the surjectivity of = (Corollary 4.32). By definition Q ‘iif and only if M halts on its 


own code i. This leads to Q'i > Q' i, a contradiction. O 


4.2.3 Completeness of the Turing Jump 


In this subsection, we prove that all predicates that are semi-decidable relative to 
Q are many-one reducible to the Turing jump Q”, given any predicate Q. 


In order to do so, we first set up an alternative definition of the Turing jump, namely 
the predicate of all numbers encoding pairs (i, x) such that the i-th oracle machine 
halts on input x, and prove that it is many-one equivalent. The two definitions are 
related to the halting and self-halting problem of Turing machines in the literature. 


Definition 4.36 (Universal jump) Q° (i,x) := =iQx>* 
Lemma 4.37 Q! =n Q° 


Proof First we show Q' <m Q°, then Q° <m Q’: 
e Ai. (i,i) is a many-one reduction. 


e This direction needs SMN-like reasoning enabled by the parametricity of the 
enumerator = (Lemma 4.31). 
Therefore, we first define a parametric family of oracle machines N => Nee : 
Given an index (i, x) choose Mix, Ry:=ZiRxand Myx) fy i= Fic fx. 
In other words, M(;,x) is the oracle machine that ignores its input and is hard 
coded to query the i-th oracle machine on input x. The core specification and 
continuity follow respectively from = i. 
Now, by Lemma 4.31 there is a function y : N > N that takes numbers encod- 
ing pairs (i,x) and returns the code of My; ,). As My; x) halts on its code (or 
any other input) if and only if the machine with code i halts on x, the function 
y translates instances of Q° into instances of Q' and therefore is a sufficient 
many-one reduction. m) 
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Next we prove that Q' is Q-complete. We make use of the fact that Q'=,, Q° as one 
direction is more convenient to prove using Q° and the other one directly using Q”. 


Lemma 4.38 So(P)>Pxm Q' 


Proof We show So (P) > P <m Q°and P 2m Q' => SQ(P). The claim then follows 
by Q' =m Q° (Lemma 4.37) and the transitivity of <m (Lemma 2.6). 


> Assume there exists an oracle machine M that semi-decides P when given 
an oracle for Q. We need to show P <m Q°. Let i be the code of M, it exists 
because of surjectivity of = (Corollary 4.32). The function Ax. (i, x) is a many- 
one reduction. 


<— Assume there exists a function fm : N > N such that Px > Q' (fm x). Now, 
construct an oracle machine that semi-decides P when given an oracle for Q. 
Choose M Rx := E (fm x) R (fm x) and Mo fx := E (fm x)¢ f (fm x). The core 
specification and continuity follow respectively from = (fm x). m) 


Chapter 5 


Post’s Theorem 


In Chapter 3, we have seen how predicates on numbers can be classified based on 
the arithmetic formulas that define them. In Chapter 4, we have studied oracle de- 
cidability and set up notions that allow comparing predicates of numbers based on 
their degree of undecidability. Post’s theorem gives a deep connection between the 
arithmetical hierarchy and repeated Turing jumps starting with a decidable predi- 
cate like the empty predicate. 


This connection was first reported by Post in his preliminary report in 1948 [47]. 
He claimed that he was able to prove that more quantifiers in the arithmetical hier- 
archy allow predicates of a higher degree of unsolvability. Unfortunately, Post did 
not publish any proof of his finding, but the preliminary report indicates that the 
result was established by a connection to repeated jumps starting with the empty 
predicate. 


In 1952, the first proof was published by Kleene in his book “Introduction to Meta- 
mathematics” [33] but attributed by him to Post. Kleene did not explicitly talk 
about jumps starting from the empty predicate. He proved that a predicate is both 
in ) „41 and [],,,, if and only if it is Turing reducible to possibly multiple predi- 
cates in Y, or [],, ([33] Theorem XI, page 293). 


Nowadays, in textbooks e.g. by Odifreddi [42], Cooper [9], and Soare [51], there 
are usually multiple statements proven that together are called Post’s Theorem. The 
initial statement of Odifreddi and Soare is that a predicate is in ),,, if and only 
if it is semi-decidable relative to a predicate in | |, or in Y, (or semi-decidable 
relative to the n-th jump of the empty predicate in case of Cooper). Then it can be 
shown that the (n+1)-th Turing jump is many-one-complete in ) done so by 
Soare. Cooper shows the statements in reverse order. 


n+1/ 
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We will present a synthetic proof of Post's theorem following the order of Soare [51] 
in Section 5.2. Beforehand we formally set up the hierarchy of repeated Turing 
jumps in Section 5.1. 


5.1 Connecting the Arithmetical Hierarchy and Turing Jumps 
We define "repeated jumping starting with the empty predicate" as follows: 


Definition 5.1 The n-th Turing jump of the empty predicate oa : N> Pis defined as: 


a =... 
gitt!) = gi)! 


The predicate al"? is defined on numbers, while the arithmetical hierarchy is de- 
fined on predicates of vectors of numbers. This is however not a big deal as vectors 
can be encoded into a single number using Cantor’s pairing function repeatedly. 
Thus, encodings between vectors and numbers are many-one reductions between 
the respective predicates and the arithmetical hierarchy is closed under many-one 
reduction (cf. Lemma 3.25). 


In this chapter, we will abstract away from underlying vectors and treat the arith- 
metical hierarchy as it would classify (unary) predicates on numbers. We encode 
multi-arity predicates by using Cantor’s pairing functions. Keeping the encodings 
implicit shifts the attention to the main part of the proofs. 


In the accompanying Coq development, we cast Ø™ to vectors by only extracting 
the last element from the vector. During the proofs of Post’s Theorem, we explicitly 
construct the many-one reductions to convert vectors of different arity. 


5.2 Synthetic Proof of Post’s Theorem 


The main theorem that connects oracle machines and the arithmetical hierarchy 
is Theorem 5.4 stating that a predicate is ee +1 if and only if it is semi-decidable 
relative to a predicate in jae We prove both directions separately in Lemma 5.2 
and Lemma 5.3. The other statements of Post’s Theorem are more or less direct 
consequences of Theorem 5.4 and lemmas we have proven before. 


The following Lemma, that a See +1 Predicate is semi-decidable relative to a Il. 
predicate can be easily shown by constructing a semi-decider that linearly searches 
for the existentially quantified value. 


Lemma5.2 Pe ar > IQ € IIn. So(P) 
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Proof Assume P € ee by inversion P = Ax. dy. Q(y,x) for Q € Eke We 

show Sa(P) by constructing an oracle machine that semi-decides P relative to Q 

by linearly searching x. Choose MRx » x := Hy. R (y,x) true and Me fx := 
Some * if seval (f (x, y)) m = Some true 

1 A(y, m). : 

None else 

The core specification follows by the specification of u and seval. For continuity 

choose the singleton list only containing (y, x). Because if M halts then there exists 

a y such that the oracle halts on (y, x) with output true. O 


For the other direction, we first want to give some intuition. Intuitively, it states 
that if there is an oracle machine that semi-decides a predicate then the predicate is 
only a 3-quantifier away from the oracle. In the introduction of this thesis in Chap- 
ter 1, we relied on the intuition that the halting problem for Turing machines can 
be expressed as “there exists a number of steps s such that the Turing machine has 
halted after < s steps”. Soare [51] extends this intuition to a proof of Theorem 5.4. 


This intuition, however, can not be applied to our setting as synthetic oracle ma- 
chines as introduced in Chapter 4 can not be simulated step-wise. Instead, we ex- 
tract the proof idea of Odifreddi [42] who exploits compactness and monotonicity 
of u-recursive functionals. The idea behind our proof of Theorem 5.4 is that by 
Theorem 4.17 the behavior of synthetic oracle machines can be expressed only by 
its core (which is computable) by existentially quantifying the answeres (stored in 
two lists Lirue and Lgalse) to the finitely many oracles queries that the oracle machine 
does during an execution that halts. 


We classically show Lemma 5.3 and consequently all results derived from it by as- 
suming LEM. Still, the classical reasoning of the proofs can be traced back to exactly 
two usages of LEM, as we discuss at the end of this section. 


Lemma 5.3 LEM > Pe Y,,, 30€ TIn. So(P) 


Proof Assume Q € II. and So(P). Then there is an oracle machine M such 
that Px MQx» x. By PredExt it suffices to show that MQ y > x is in yee 
By Theorem 4.17 the behavior of an oracle machine can be described as follows 
Ax. ALtrue Lfalse- (Vaelırue- Q a) A (V a€L false- Qa) AM. (lookup Ltrue Lfalse ) xb x 
which suffices to show in )-, ,,. For this purpose, we use a bijection that encodes 
lists of vectors of natural numbers into natural numbers. Therefore we treat the ex- 
istentials that quantify lists normally and apply Lemma 3.26 that allows to stack ad- 
ditional quantifiers ona + +1 predicate. Because $. +1 is closed under A (Lemma 
3.29) we only need to show that the three predicates are in ye +1 Separately. 


"Made explicit in the corresponding Cog development. 
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eA lie, Lfalse J» X}- Vae Lrrue- Q ae 
By Lemma 3.31 the bounded quantifier does not increase the complexity. It 


remains to show Q € ),,, which follows by Lemma 3.27 from the assump- 
tionQ € [],. 


er rias Lfalse) X}. Vae Ltalse- Qa € ae 
By Lemma 3.31 the bounded quantifier does not increase the complexity. It 


by Corollary 3.24. The 


remains to show Q € Y,,¡. We know Q € [] 
claim follows by LEM and Lemma 3.28. 


eX ((Ltrues Lessa J» X}- Me (lookup Lirue Lfalse ) xbre a u 
Showing In. seval (M. (lookup Ltrue Lfalse) x) n = Somex E } „+; suffices, 
by the specification of seval. The existential does not increase the complexity 


m+1 


ofa Y) n+1 formula, by Lemma 3.26. The claim follows as seval is decidable. 
O 


Theorem 5.4 LEM > Pe IE +30e TL... So(P) 


Proof We have proven both directions separately in Lemma 5.2 and Lemma 5.3. 0 


As classically a predicate is Turing equivalent to its complement and oracles can be 
replaced by a Turing equivalent one, we can also show that a predicate is in ) „;1 


if and only if it is semi-decidable relative to a predicate in ),, as a corollary. 
Corollary 5.5 LEM > P € ee -—AQeE St! SoQ(P) 


Proof By LEM and Lemma 3.28, Q € ae QE Hs Further, by LEM and Corol- 
lary 4.11, So (P) = Sg(P). Therefore, the claim follows by LEM and Theorem 5.4. O 
Next, we prove that the n + 1-th Turing jump is y +1 many-one-complete. This is 
not true for Ø? because a many-one reduction would need to encode instances of 
a given predicate into an instance of the empty predicate but no number fulfills the 
empty predicate. Consequently, @ is not a many-one-complete decidable predicate. 


Theorem 5.6 LEM > Ø™ e Y and LEM > VP e Y, Pm oo” 


Proof We prove both claims separately, both by induction on n. 
me >, ifitis 
semi-decidable relative to ø™ e >, by employing the induction hypoth- 


e In the base case, Ø is decidable. In the induction step, Ø 


esis, LEM and Corollary 5.5. The claim follows as S ama ') by Lemma 
4.34. 
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e In the base case, given P € = , we need to show P <,, Ø i By Lemma 4.38 it 
suffices to show Sg(P). As Ø is decidable, by Lemma 4.8 it suffices to show 
S(P). The claim follows by Lemma 3.22 and the assumption P € ) ,. 


In the induction case, assume P € $. 42. By LEM and Corollary 5.5 there is 


Q € ee such that Sg(P). We need to show P <m @'"*?) so it suffices to 
show Sg(n+1)(P) by Lemma 4.38. By Lemma 4.10 and the assumption Sy (P) 


(n+1) (n+1) 


the claim reduces to Q<7@ , which follows by Lemma 4.5 because Y 


is ),,,-complete by the inductive hypothesis. o 


In order to fix the n = 0 case of Theorem 5.6, we further show for all n that oa) is 


> „Turing-complete. 
Corollary 5.7 LEM > VP € aor P<r gi 


Proof For n = 0 the claim is trivial as P is decidable. For n > 0 the claim follows by 
Lemma 4.5 as a corollary of Theorem 5.6. m 


As a final corollary, we show that a predicate is in Y, ,, if and only if it is semi- 


decidable relative to om. 


Corollary 5.8 LEM > P € =; Son (P) 
Proof We prove both directions separately. 


> Assume P € > +1 SO by LEM and Corollary 5.5 that there is a Q € a such 
that So(P). By Lemma 4.10 it suffices to show P <r al" which follows by 
LEM and Corollary 5.7 


— Assume S,m(P). By LEM and Corollary 5.5 it suffices to show am e ds 
which holds by LEM and Theorem 5.6. O 


All proofs in this section require LEM. However, the usage can be traced back to 
exactly two places. First, in Theorem 5.4 we use that if a predicate is in Y. then 
its complement is in [eles (Lemma 3.28) in order to reason that the specification 
of Lfalse is in >. +1- Secondly, in Corollary 5.5 we again use Lemma 3.28 and that 
P = P (Lemma 4.6) in order to reason that a predicate is semi-decidable in a Y. 
predicate if and only if it is semi-decidable in a [In predicate. Besides those two 
usages of LEM, our proofs are constructive. 


Chapter 6 


Discussion 


We conclude this thesis with a brief discussion of our results. 


In Chapter 3 we have formalized two definitions of the arithmetical hierarchy in 
constructive type theory and have studied their equivalence by assuming axioms 
from synthetic computability. 


The first definition was directly in first-order arithmetic and serves as a sanity check 
for the second synthetic definition. For that, we used the mechanization of the syn- 
tax and semantics of first-order arithmetic provided by the Cog Library for Mecha- 
nised First-Order Logic [30]. This kind of defining the arithmetical hierarchy can be 
found as a side note in the textbook by Odifreddi [42]. In contrast to the majority 
of other definitions in the literature (as we discuss in Section 6.2), it enables classi- 
fying formulas solely based on their syntax via counting the number of quantifier 
alternations in prenex normal form, so especially without incorporating computa- 
tional properties. 


To enable a rough upper-bound classification of arbitrary formulas, we have im- 
plemented and verified a prenex normal form algorithm. The algorithm is struc- 
turally recursive which allows a direct implementation in Cog. A consequential 
difficulty we were able to solve was to correctly rename variables when pulling 
multiple quantifiers at once. The prenex normal form is a classical result and thus 
we assumed the law of excluded middle for the verification of the algorithm. We 
generalized our results on prenex normal form to a general signature and model of 
first-order arithmetic, for which it is equivalent to the law of excluded middle. The 
algorithm does not optimize the number of quantifier alternations and thus only 
gives a rough upper-bound classification in the arithmetical hierarchy. We leave a 
further improvement for future work (cf. Section 6.3). 
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The second definition of the arithmetical hierarchy classifies type-theoretic pred- 
icates directly. It is purely synthetic without depending on a concrete model of 
computation. This makes it more convenient to work with and establish Post’s the- 
orem synthetically. 


In Chapter 4 we have presented synthetic oracle machines and the first synthetic 
definition of the Turing jump. 


The synthetic definition of Turing reducibility by Forster and Kirst [16] who have 
followed an idea by Bauer [4] has served as a starting point. However, how and 
under which axioms a synthetic Turing jump could be defined was unclear in the 
beginning since explicit constructions as they are presented in textbooks are in a 
concrete model of computation (e.g. oracle Turing machines or u-recursive partial 
functionals) and cannot be translated to the synthetic setting. 


Our key insight was that by adjusting the continuity requirement of synthetic or- 
acle machines compared to Forster and Kirst, constructive results like that oracle 
machines can be solely described by a higher-order partial function were possible. 
This allows for constructing an enumeration of synthetic oracle machines by as- 
suming an enumeration of continuous higher-order partial functions that can be 
used to define the synthetic Turing jump. We leave further investigation on the as- 
sumption and the question of whether an enumeration of continuous higher-order 
partial functions could eventually be constructed by assuming known axioms like 
EPF for future work (cf. Section 6.3). 


As synthetic oracle machines can be solely described by a higher-order partial func- 
tion, the question arises whether notions like Turing reducibility or oracle semi- 
decidability could be defined only by using higher-order partial functions. At the 
moment the characterization given by Theorem 4.17 is not very informative. Thus, 
we keep the definitions using oracle machines for the moment as we believe that 
they are more intuitive. 


Ultimately, we have found a way to connect the synthetic arithmetic hierarchy to 
the synthetic Turing jump by proving Post’s theorem synthetically. Meanwhile, 
the question has arisen if a step-wise interpretation of oracle machines would have 
been needed to establish Post’s theorem (like in the proof by Soare [51]), but we 
were able to exploit continuity instead, following the proof idea of Odifreddi [42]. 
Most textbooks work in classical set theory and establish all their results classically. 
Therefore it was open how constructive a possible proof of Post’s theorem would be. 
Our proof of Post’s theorem does rely on the law of excluded middle but we were 
able to trace the classical reasoning in the proofs back to exactly two usages of LEM. 
We leave the further investigation on whether weakening the classical assumptions 
is possible for future work (cf. Section 6.3). 
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In Section 6.1, we briefly discuss our Coq development. Then, we discuss some 
related work in Section 6.2 and finally point out possible future work in Section 6.3. 


6.1 Coq Mechanization 


All results of this thesis are mechanized in the accompanying Coq development. In 
the digital version of this thesis, all definitions, lemmas, and theorems are hyper- 
linked to the respective position of the HTML that allows interactive navigation. 
The whole Coq development has been placed in the following Github repository 
that is self-contained and includes all dependencies. 


https://github.com/uds-ps1/coq-posts-theorem/tree/ba-mueck 


All external dependencies are in the external folder and have been labeled with 
the exact source. The primary source of dependencies is the accompanying Coq 
development of Forster's PhD thesis [16] where we have taken e.g. the definition 
and proofs from our preliminaries Chapter 2 from. The definition of the syntax and 
semantics of first-order logic together with some corresponding facts was taken 
from the Cog Library of Undecidability Proofs [30]. 


Compared to the on-paper proofs, the Coq proofs are not more complex in general. 
Some of the proofs on the arithmetical hierarchy, especially Lemma 3.30 that the 
hierarchy is closed under bounded quantifiers and Lemma 3.31 that predicates of 
the hierarchy can be lifted to lists required some technical encodings that we have 
omitted on paper. For the bounded quantifier proof, we have assumed an encoding 
of lists to numbers that is known how to be constructed but not spelled out for this 
thesis. The proof of Post's theorem in Chapter 5 was presented on unary predicates 
on paper. In Coq, the respective encodings are made explicit, which adds another 
rewriting step and a trivial many-one reduction but does not increase the general 
complexity. In the future, it might be worth trying if an intermediate definition of 
the arithmetical hierarchy on unary predicates would simply the proofs similarily 
like on paper. 


The Coq development is structured similarly to this thesis. The number of lines of 
code for the respective sections splits up as follows: 
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Specification | Proofs 
Prenex Normal Form 185 326 
Arithemtical Hierarchy | 45 236 
in First-order Logic 
Arithemtical Hierarchy | 103 459 
in Type Theory 
Arithemtical Hierarchy | 15 105 
Equivalence 
Oracle Computability | 170 649 
Turing Jump 64 152 
Post’s Theorem 49 168 
Total 631 2095 


6.2 Related Work 


Arithmetical Hierarchy Kleene [31] and Mostowski [38] developed the arith- 
metical hierarchy independently. Kleene was aware of Mostowski’s work at least in 
1952 [33] when he attributes the hierarchy to himself and Mostowski. Kleene de- 
fines the hierarchy with predicates decidable by u-recursive functions in the base. 
Mostowski defines the hierarchy in first-order arithmetic with decidable formulas 
in the base according to the ordinary rules of inference and the ordinary arithmeti- 
cal axioms. 


Mostowski observes that quantifier-free formulas are at the base level of the hierar- 
chy and that adding quantifiers may give an undecidable formula, but the defini- 
tion of the arithmetical hierarchy in first-order arithmetical we present in Section 3.1 
is not equivalent to Mostowski’s hierarchy in the base. In the English Wikipedia en- 
try on the arithmetical hierarchy [61], the hierarchy is defined with only quantifier- 
free formulas at the base and variations like the hierarchy with decidable predicates 
in the base are discussed together with the inequality of )', and [| [,. We have 
checked several textbooks [49, 42, 9, 51, 14, 25, 24] but all define the arithmetical 
hierarchy with decidable predicates in the base. Only Odifreddi [42] mentions the 
alternative definition that only allows quantifier-free formulas and the inequality 
in the base. 


Synthetic Computability Richman and Bridges [48, 6] study computability the- 
ory in the the context of constructive metamathematics in the sense of Bishop [5]. 
Richman [48] lays the foundation of synthetic computability by proposing the ax- 
iom of the enumerability of all enumerable sets and proving the undecidability of 
the halting problem solely synthetically without a concrete model of computation. 


Bauer [3] develops synthetic computability in Hyland’s effective topos [27] by as- 
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suming the enumerability of enumerable sets of numbers. He proves many fun- 
damental results including another theorem that is well known under the name 
“Post’s theorem” and should not be confused with what we consider “Post’s Theo- 
rem” in this thesis. What he considers “Post’s Theorem” is that a set is decidable if 
and only if it is semi-decidable and its complement also is semi-decidable. 


Both Richman, Bridges and Bauer assume the axiom of countable choice which 
makes the law of excluded middle disprovable since both axioms together imply 
that all predicates are decidable [55]. 


Synthetic Computability in Coq Forster, Kirst and Smolka [18] have developed 
a basic framework for synthetic computability theory in Coq by translating some of 
the ideas of Bauer [3] to constructive type theory. They also prove the same “Post's 
Theorem” as Bauer - that predicates are decidable if and only if they are enumer- 
able and their complement is enumerable — and mechanize that it is equivalent to 
Markov’s principle [55]. 


Their framework for synthetic computability in Coq was developed further as part 
of the Coq Library of Undecidability Proofs [19] with many applications on mecha- 
nized reductions of undecidable problems. 


Forster [15, 17] studies multiple different synthetic axioms in constructive type the- 
ory and elaborates on their consistency together with the law of excluded middle. 


Synthetic One-One, Many-One, and Truth-Table Reducibility In his Bachelor’s 
thesis [28] and in a resulting preprint together with Forster and Smolka [20], Jahn 
studies synthetic one-one, many-one, and truth-table reducibility in more detail. 
They prove a constructive and synthetic version of Myhill’s isomorphism theorem 
[40] that one-one equivalent predicates are isomorphic and solve Post’s problem 
synthetically for many-one and truth-table reducibility by synthetically establish- 
ing simple and hyper-simple predicates [46]. 


Synthetic Turing Reductions The first synthetic definition of Turing reductions 
was proposed by Bauer [4]. Bauer does not work in constructive type theory but in 
the intuitionistic effective topos. He first came up with the idea of defining synthetic 
Turing reductions in two layers as a transformer of solvers of potentially uncom- 
putable problems that factors through a computable core on computable oracles. 


The first synthetic definition of Turing reductions in constructive type theory is 
presented by Forster in his PhD thesis [16] and was conceived in joint work with 
Kirst following the two-layered idea by Bauer. Furthermore, Forster discusses two 
well-known refinements of Turing reductions, bounded Turing reductions and to- 
tal bounded Turing reductions and shows that the latter is equivalent to truth-table 
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reductions. Finally, he shows the well-known fact that truth-table reductions how- 
ever differ from general Turing reductions and compares their definition to Bauer’s. 


Our definition of synthetic oracle machines was mostly adopted from the definition 
of Forster and Kirst, but with an adjustment in the formulation of the continuity 
requirement that has enabled us to determine synthetic oracle machines solely by 
a higher-order function. 


We discuss the definitions by Bauer and by Forster and Kirst in more detail in Sub- 
section 4.1.5 and carefully work out the differences and what they imply. 


6.3 Future Work 


The prenex normal form algorithm we verified does not optimize the number of 
quantifier alternations and therefore is of limited suitability for the classification 
of formulas in the arithmetical hierarchy. In future work, one could improve the 
algorithm concerning this matter. A possible approach could be to optimize when 
merging the two sub-lists in the recursive step of a binary operator instead of simply 
concatenating the lists. This would require constructing the de Bruijn renamings 
simultaneously when merging the lists. Another interesting question would be if 
one could prove the equivalence of such an algorithm to the non-deterministic al- 
gorithm that arises out of the rules of Lemma 3.5 and is presented in textbooks [49 | 
(there are only finitely many prenex normal forms for each formula when applying 
these rules). 


We assumed ACT - a CT-like axiom - for our equivalence result of the two arith- 
metical hierarchies in Section 3.3. In future work this axiom could probably be 
reduced to a more common variant of CT by using the results of Peters [45] built 
on work by Larchey-Wendling and Forster [37] and Kirst and Hermes [29, 22] as 
discussed in the remark at the end of Subsection 3.3.2. 


For defining the Turing jump, we have assumed an enumeration for continuous 
higher-order partial functions. It would be interesting to study this enumerator 
more carefully. Maybe one could be able to construct it (or a weaker formulation 
of it) by only using known axioms like EPF. A possible starting point could be the 
lecture notes by Streicher [52] on Kleene’s second algebra where he elaborates on 
the realizability of continuous functions in the Baire space. 


On the other side, one could consider if defining a synthetic Turing jump might be 
possible without enumerating higher-order functions. One could perhaps change 
the definition of oracle machines such that the core is a function of type N x N > 1 
(which is isomorphic to functions of type N — 1 that are enumerated by EPF) 
where the oracle is passed as the first component of the argument such that the 
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argument i : N means that the oracle is the i-th function enumerated by EPF. It 
would be interesting to study whether such a definition of oracle machines could 
give an equivalent definition of Turing reductions or whether this definition might 
be weaker but sufficient to construct a synthetic Turing jump. 


Our synthetic proof of Post’s theorem is classical. In future work, one could study 
whether some of the statements can be proven constructively or study the equiva- 
lence to classical axioms. 


There is one result essential in textbooks on oracle semi-decidability and Turing 
reductions that has only lately attracted our attention since it is not necessary for 
establishing Post’s theorem and that we were not able to prove synthetically yet: 
So(P)ASo (P) > P <q Q. Note that the not relativized version is also known as 
“Post’s theorem” and is equivalent to Markov’s principle [55], so the relativized 
version for sure only holds when assuming classical axioms. The difficult direction 
is to construct a Turing reduction given the two semi-deciders. The obvious core 
of such a Turing reduction would be to step-wise simulate the partial functions 
gained when forwarding the oracle to the two semi-deciders and check which semi- 
decider terminates first. The problem however is, that such a core is not continuous. 
Continuity requires that if an oracle machine halts it still halts with the same output 
when replacing the oracle with an oracle that agrees on the finite list in question. 
For the core above not only termination matters but also the number of steps after 
which the step-wise evaluation of the cores of the two semi-deciders terminates. 
When replacing the oracle, another semi-decider could terminate first which would 
change the answer of the constructed Turing reduction and violates continuity. 


As there exists a framework for synthetic relative decidability now, it would be 
interesting to study more results on relative decidability synthetically. For example, 
one could study the Kleene-Post theorem [34] that there are uncomparable Turing 
degrees or solve Post’s problem for Turing reductions synthetically for instance by 
finding a synthetic proof for the Friedberg-Muchnik theorem [21, 39]. This was 
already formulated as future work by Bauer [4] and Forster [16], but to the best of 
our knowledge, nobody has worked on it yet. 


Bibliography 


[1] Yohji Akama, Stefano Berardi, Susumu Hayashi, and Ulrich Kohlenbach. An 
arithmetical hierarchy of the law of excluded middle and related principles. 
In Proceedings of the 19th Annual IEEE Symposium on Logic in Computer Science, 
2004., pages 192-201, 2004. doi:10.1109/LICS.2004.1319613. 


[2] Hendrik P. Barendregt. The lambda calculus - its syntax and semantics, volume 
103 of Studies in logic and the foundations of mathematics. North-Holland, 1985. 
ISBN 978-0-444-86748-3. 


[3] Andrej Bauer. First steps in synthetic computability theory. In Martin Hötzel 
Escard6, Achim Jung, and Michael W. Mislove, editors, Proceedings of 
the 21st Annual Conference on Mathematical Foundations of Programming Se- 
mantics, MFPS 2005, Birmingham, UK, May 18-21, 2005, volume 155 of 
Electronic Notes in Theoretical Computer Science, pages 5-31. Elsevier, 2005. 
doi:10.1016/j.entcs.2005.11.049. 


[4] Andrej Bauer. Synthetic mathematics with an excursion into computability 
theory. University of Wisconsin Logic seminar, 2021. URL http://math. 
andrej.com/asset/data/madison-synthetic-computability-talk.pdf. 


[5] Errett Bishop. Foundations of Constructive Analysis. New York, NY, USA: 
Mcgraw-Hill, 1967. 


[6] Douglas Bridges and Fred Richman. Varieties of Constructive Mathematics. Lon- 
don Mathematical Society Lecture Note Series. Cambridge University Press, 
1987. doi:10.1017/CBO9780511565663. 


[7] Alonzo Church. An unsolvable problem of elementary number theory. Amer- 
ican Journal of Mathematics, 58(2):345-363, 1936. ISSN 00029327, 10806377. 
doi:10.2307/2371045. 


— 
00 
La 


Alonzo Church. A note on the Entscheidungsproblem. Journal of Symbolic 
Logic, 1(1):40-41, 1936. doi:10.2307/2269326. 


66 


Bibliography 


[9] S. Barry Cooper. Computability theory. Chapman & Hall/CRC Press, 2004. 


ISBN 1584882379. 


[10] Thierry Coquand and Gérard Huet. The calculus of constructions. Informa- 


[16 


a) 


[17 


Lo 


[18 


a) 


tion and Computation, 76(2):95-120, 1988. ISSN 0890-5401. doi:10.1016/0890- 
5401(88)90005-3. 


Haskell B. Curry. Functionality in combinatory logic. Proceedings of the Na- 
tional Academy of Sciences, 20(11):584-590, 1934. doi:10.1073/pnas.20.11.584. 


Martin Davis. Computability and Unsolvability. McGraw-Hill, 1958. 


Nicolaas G. de Bruijn. Lambda calculus notation with nameless dummies, 
a tool for automatic formula manipulation, with application to the church- 
rosser theorem. Indagationes Mathematicae (Proceedings), 75(5):381-392, 1972. 
ISSN 1385-7258. doi:10.1016/1385-7258(72)90034-0. 


Rodney G. Downey and Denis R. Hirschfeldt. Algorithmic randomness and com- 
plexity. Springer Science & Business Media, 2010. ISBN 978-0-387-68441-3. 
doi:10.1007/978-0-387-68441-3. 


Yannick Forster. Church’s thesis and related axioms in Coq’s type theory. In 
Christel Baier and Jean Goubault-Larrecq, editors, 29th EACSL Annual Confer- 
ence on Computer Science Logic, CSL 2021, January 25-28, 2021, Ljubljana, Slovenia 
(Virtual Conference), volume 183 of LIPIcs, pages 21:1-21:19. Schloss Dagstuhl 
- Leibniz-Zentrum fiir Informatik, 2021. doi:10.4230/LIPIcs.CSL.2021.21. 


Yannick Forster. Computability in Constructive Type Theory. PhD thesis, Saar- 
land University, 2021. doi:10.22028/D291-35758. 


Yannick Forster. Parametric Church's thesis: Synthetic computability without 
choice. In Sergei N. Artemov and Anil Nerode, editors, Logical Foundations 
of Computer Science - International Symposium, LFCS 2022, Deerfield Beach, FL, 
USA, January 10-13, 2022, Proceedings, volume 13137 of Lecture Notes in Com- 
puter Science, pages 70-89. Springer, 2022. doi:10.1007/978-3-030-93100-1_6. 
URL https: //doi.org/10.1007/978-3-030-93100-1_6. 


Yannick Forster, Dominik Kirst, and Gert Smolka. On synthetic undecidability 
in Coq, with an application to the Entscheidungsproblem. In Assia Mahboubi 
and Magnus O. Myreen, editors, Proceedings of the 8th ACM SIGPLAN Interna- 
tional Conference on Certified Programs and Proofs, CPP 2019, Cascais, Portugal, 
January 14-15, 2019, pages 38-51. ACM, 2019. doi:10.1145/3293880.3294091. 


Yannick Forster, Dominique Larchey-Wendling, Andrej Dudenhefner, Edith 
Heiter, Dominik Kirst, Fabian Kunze, Gert Smolka, Simon Spies, Dominik 
Wehr, and Maximilian Wuttke. A Coq library of undecidable problems. In 


Bibliography 67 


CogPL 2020 The Sixth International Workshop on Cog for Programming Languages, 
2020. 


[20] Yannick Forster, Felix Jahn, and Gert Smolka. A Constructive and Synthetic 
Theory of Reducibility: Myhill’s Isomorphism Theorem and Post’s Problem 
for Many-one and Truth-table Reducibility in Cog (Full Version). working pa- 
per or preprint, February 2022. URL https: //hal.inria.fr/hal-03580081. 


[21] Richard M. Friedberg. Two recursively enumerable sets of incomparable de- 
grees of unsolvability (solution of Post’s problem, 1944). Proceedings of the 
National Academy of Sciences, 43(2):236-238, 1957. doi:10.1073/pnas.43.2.236. 


[22] Marc Hermes and Dominik Kirst. An analysis of Tennenbaum’s theorem in 
constructive type theory. In 7th International Conference on Formal Structures for 
Computation and Deduction (FSCD 2022), 2022. 


[23] David Hilbert and W. Ackermann. Grundzüge der theoretischen Logik. Springer, 
Berlin, Germany, 1972. ISBN 9783662119327. 


[24] Peter G. Hinman. Recursion-Theoretic Hierarchies. Perspectives in Logic. Cam- 
bridge University Press, 2017. doi:10.1017/9781316717110. 


[25] Steven Homer and Alan L. Selman. Computability and complexity theory, vol- 
ume 194. Springer, 2011. ISBN 978-1-4614-0682-2. doi:10.1007/978-1-4614- 
0682-2. 


[26] William A. Howard. The formulae-as-types notion of construction. In 
Haskell B. Curry, Hindley B., Seldin J. Roger, and P. Jonathan, editors, To H. B. 
Curry: Essays on Combinatory Logic, Lambda Calculus, and Formalism. Academic 
Press, 1980. 


[27] J. Martin E. Hyland. The effective topos. In A.S. Troelstra and D. van 
Dalen, editors, The L. E. J. Brouwer Centenary Symposium, volume 110 of Stud- 
ies in Logic and the Foundations of Mathematics, pages 165-216. Elsevier, 1982. 
doi:10.1016/S0049-237X (09)70129-6. 


[28] Felix Jahn. Synthetic One-One, Many-One, and Truth-Table Reducibility in Coq. 
Bachelor’s thesis, Saarland University, September 2020. URL https://ps. 
uni-saarland.de/~jahn/files/thesis.pdf. 


[29] Dominik Kirst and Marc Hermes. Synthetic undecidability and incomplete- 
ness of first-order axiom systems in Coq. In Liron Cohen and Cezary Kaliszyk, 
editors, 12th International Conference on Interactive Theorem Proving, ITP 2021, 
June 29 to July 1, 2021, Rome, Italy (Virtual Conference), volume 193 of LIPIcs, 
pages 23:1-23:20. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2021. 
doi:10.4230/LIPIcs.ITP.2021.23. 


68 Bibliography 


[30] Dominik Kirst, Johannes Hostert, Andrej Dudenhefner, Yannick Forster, Marc 
Hermes, Mark Koch, Dominique Larchey-Wendling, Niklas Mtick, Benjamin 
Peters, Gert Smolka, and Dominik Wehr. A Coq library for mechanised first- 
order logic. In The Cog Workshop, 2022. 


[31] Stephen C. Kleene. Recursive predicates and quantifiers. Transactions of the 
American Mathematical Society, 53(1):41-73, 1943. doi:10.1090/S0002-9947- 
1943-0007371-8. 


[32] Stephen. C. Kleene. On the interpretation of intuitionistic number theory. 
Journal of Symbolic Logic, 10(4):109-124, 1945. doi:10.2307/2269016. 


[33] Stephen C. Kleene. Introduction to metamathematics. 1952. 


[34] Stephen C. Kleene and Emil L. Post. The upper semi-lattice of degrees 
of recursive unsolvability. Annals of mathematics, pages 379-407, 1954. 
doi:10.2307/1969708. 


[35] Georg Kreisel. Mathematical logic. Lectures in modern mathematics 3, pages 
95-195, 1965. 


[36] Kazimierz Kuratowski and Alfred Tarski. Les operations logiques et les ensembles 
projectifs. Uniwersytet, Seminarjum Matematyczne, 1931. doi:10.4064/ FM-17- 
1-240-248. 


[37] Dominique Larchey-Wendling and Yannick Forster. Hilbert’s tenth prob- 
lem in coq (extended version). Log. Methods Comput. Sci., 18(1), 2022. 
doi:10.46298/1mcs-18(1:35)2022. 


[38] Andrzej Mostowski. On definable sets of positive integers. Fundamenta Math- 
ematicae, 34(1):81-112, 1947. doi:10.4064/fm-34-1-81-112. 


[39 


Ll 


Albert A. Muchnik. On strong and weak reducibility of algorithmic problems. 
Sibirskii Matematicheskii Zhurnal, 4(6):1328-1341, 1963. 


[40] John Myhill. Creative sets. Mathematical Logic Quarterly, 1(2):97-108, 1955. 
doi:10.1002/malq.19550010205. 


[41] A. Nerode. General topology and partial recursive functionals. Talks Cornell 
Summ. Inst. Symb. Log., pages 247-251, 1957. 


[42 


Ll 


Piergiorgio Odifreddi. Classical recursion theory. The theory of functions and sets 
of natural numbers., volume 125 of Stud. Logic Found. Math. Amsterdam etc.: 
North-Holland, paperback ed. edition, 1992. ISBN 0-444-89483-7. 


[43 


Ll 


Christine Paulin-Mohring. Inductive definitions in the system Coq - rules 
and properties. In Marc Bezem and Jan Friso Groote, editors, Typed Lambda 
Calculi and Applications, International Conference on Typed Lambda Calculi and 


Bibliography 69 


Applications, TLCA "93, Utrecht, The Netherlands, March 16-18, 1993, Proceedings, 
volume 664 of Lecture Notes in Computer Science, pages 328-345. Springer, 1993. 
doi:10.1007 / BFb0037116. 


[44 


(waan 


Christine Paulin-Mohring. Introduction to the Calculus of Inductive Con- 
structions. In Bruno Woltzenlogel Paleo and David Delahaye, editors, All about 
Proofs, Proofs for All, volume 55 of Studies in Logic (Mathematical logic and foun- 
dations). College Publications, January 2015. URL https://hal.inria.fr/ 
hal-01094195. 


[45] Benjamin Petres. Gödels Theorem Without Tears - Essential Incomplete- 
ness in Synthetic Computability. Bachelor’s thesis, Saarland University, 
June 2022. URL https://www.ps.uni-saarland.de/~peters/bachelor/ 
resources/thesis.pdf. 


[46] Emil L. Post. Recursively enumerable sets of positive integers and their de- 
cision problems. Bulletin of the American Mathematical Society, 50(5):284-316, 
1944. doi:10.1090/s0002-9904-1944-08111-1. 


[47] Emil L. Post. Degrees of recursive unsolvability-preliminary report. In Bulletin 
of the American Mathematical Society, volume 54, pages 641-642, 1948. 


[48] Fred Richman. Church's thesis without tears. J. Symb. Log., 48(3):797-803, 
1983. doi:10.2307 /2273473. 


[49] Hartley Rogers. Theory of recursive functions and effective computability. MIT Pr., 
2. print. edition, 1988. ISBN 0262680521. 


[50] Thoralf Skolem. Logisch-kombinatorische Untersuchungen über die Erfüll- 
barkeit oder Bewiesbarkeit mathematischer Satze nebst einem Theorem tiber 
dichte Mengen. Skrifter utgit av Videnskapsselskapet i Kristiania. I, Matematisk- 
naturvidenskabelig klasse, pages 1-36, 1920. 


[51] Robert I. Soare. Turing Computability : Theory and Applications. Springer Berlin 
Heidelberg, Berlin, Heidelberg, 2016. ISBN 9783642319334. 


[52] Thomas Streicher. Realizability. Lecture Notes, WS 17/18. URL https:// 
www2.mathematik.tu-darmstadt .de/~streicher/REAL/REAL. pdf. 


[53] Andrew W. Swan and Taichi Uemura. On church’s thesis in cubical as- 
semblies. Mathematical Structures in Computer Science, pages 1-20, 2022. 
doi:10.1017 /S0960129522000068. 


[54] The Coq Development Team. The Coq proof assistant. January 2022. 
doi:10.5281 /zenodo.5846982. Version 8.15. 


70 Bibliography 


[55] Anne S. Troelstra and Dirk van Dalen. Constructivism in Mathematics, Vol 1: 
Volume 121. Studies in logic and the foundations of mathematics. Elsevier 
Science, London, England, January 1988. ISBN 0444702660. 


[56] Alan M. Turing. On computable numbers, with an application to the Entschei- 
dungsproblem. J. of Math, 58:345-363, 1936. 


[57] Alan M. Turing. Systems of Logic Based on Ordinals. PhD thesis, Princeton 
University, NJ, USA, 1938. doi:10.1112/plms/s2-45.1.161. 


[58] Alan M. Turing. Systems of logic based on ordinals. Proceedings of the London 
mathematical society, 2(1):161-228, 1939. 


[59] Vladimir A. Uspenskii. On enumerable operators. Dokl. Acad. Nauk., 103: 
773-776, 1955. 


[60] Benjamin Werner. Sets in types, types in sets. In Martin Abadi and 
Takayasu Ito, editors, Theoretical Aspects of Computer Software, pages 530-546, 
Berlin, Heidelberg, 1997. Springer Berlin Heidelberg. ISBN 978-3-540-69530-1. 
doi:10.1007/BFb0014566. 


[61] Wikipedia contributors. Arithmetical hierarchy — Wikipedia, the free ency- 
clopedia. https://en.wikipedia.org/w/index.php?title=Arithmetical_ 
hierarchy&oldid=1085052268, 2022. [Online; accessed 8-June-2022]. 


[62] Norihiro Yamada. Game semantics of Martin-Löf type theory, part iii: its 
consistency with Church’s thesis. 2020. doi:10.48550/ ARXTV.2007.08094. 


